Not rated
CVE-2021-24495 The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter…
Description
The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Marmoset Viewer 1.9 | earliest → < 1.9.3 | 1.9.3 |