Not rated
CVE-2021-24982 The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting…
Description
The Child Theme Generator WordPress plugin through 2.2.7 does not sanitise escape the parade parameter before outputting it back, leading to a Reflected Cross-Site Scripting in the admin dashboard
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Child Theme Generator | 2.2.7 | No fix stated |