Skip to content
Sign in
Not rated

CVE-2021-24437 The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter…

Description

The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of a logged administrator.

Affected products and versions

Product Affected versions Fixed in
Favicon by RealFaviconGenerator 1.3.20 No fix stated

Other CVEs of Favicon by RealFaviconGenerator

The 2 CVEs of Favicon by RealFaviconGenerator →
CVE-2022-0471 The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the… Not rated
Track this CVE