Non notée
CVE-2021-24180 Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a…
Description
Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the capability of editing posts access a malicious URL.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Related Posts for WordPress 2.0 | premières → < 2.0.4 | 2.0.4 |