Skip to content
Sign in
Not rated

CVE-2021-24135 Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead…

Description

Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead to multiple Stored Cross-Site Scripting vulnerabilities allowing remote attackers to inject arbitrary JavaScript code or HTML.

Affected products and versions

Product Affected versions Fixed in
WP Customer Reviews 3.4 earliest → < 3.4.3 3.4.3

Other CVEs of WP Customer Reviews

The 2 CVEs of WP Customer Reviews →
CVE-2024-1849 The WP Customer Reviews WordPress plugin before 3.7.1 does not validate a parameter allowing contributor and above users… 5.4 Medium
Track this CVE