Skip to content
Sign in
Not rated

CVE-2021-4222 The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high…

Description

The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

Affected products and versions

Product Affected versions Fixed in
WP-Paginate 2.1 earliest → < 2.1.4 2.1.4

Other CVEs of WP-Paginate

The 2 CVEs of WP-Paginate →
CVE-2022-2050 The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege… Not rated
Track this CVE