Aller au contenu
Se connecter
Non notée

CVE-2017-20008 The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in…

Description

The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting

Produits et versions touchés

Produit Versions touchées Corrigé en
myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 1.7 premières → < 1.7.8 1.7.8

Autres CVE de myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin

Les 3 CVE de myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin →
CVE-2021-25015 The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the… Non notée CVE-2021-24755 The myCred WordPress plugin before 2.3 does not validate or escape the fields parameter before using it in a SQL… Non notée
Suivre cette CVE