Skip to content
Not rated

CVE-2021-24424 The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data…

Description

The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue

Affected products and versions

Product Affected versions Fixed in
WP Reset – Most Advanced WordPress Reset Tool 1.90 earliest → < 1.90 1.90
Track this CVE