Not rated
CVE-2021-24582 The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it…
Description
The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinkTwit 1.7 | earliest → < 1.7.1 | 1.7.1 |