Skip to content
Sign in
Not rated

CVE-2021-25101 The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST…

Description

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST data before outputting it back in attributes of an admin page, leading to a Reflected Cross-Site scripting. Due to the presence of specific parameter value, available to admin users, this can only be exploited by an admin against another admin user.

Affected products and versions

Product Affected versions Fixed in
Anti-Malware Security and Brute-Force Firewall 4.20 earliest → < 4.20.94 4.20.94

Other CVEs of Anti-Malware Security and Brute-Force Firewall

The 3 CVEs of Anti-Malware Security and Brute-Force Firewall →
CVE-2022-2599 The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some… Not rated CVE-2022-0953 The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the… Not rated
Track this CVE