Skip to content
Not rated

CVE-2021-25112 The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back…

Description

The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
WHMCS Bridge 6.4 earliest → < 6.4b 6.4b
Track this CVE