Not rated
CVE-2021-24812 The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could…
Description
The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BetterLinks – Shorten, Track and Manage any URL 1.2 | earliest → < 1.2.6 | 1.2.6 |