Skip to content
Sign in
Not rated

CVE-2021-25005 The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege…

Description

The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Affected products and versions

Product Affected versions Fixed in
SEUR Oficial 1.7 earliest → < 1.7.0 1.7.0

Other CVEs of SEUR Oficial

The 2 CVEs of SEUR Oficial →
CVE-2021-25004 The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is… Not rated
Track this CVE