Non notée
CVE-2021-24495 The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter…
Description
The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Marmoset Viewer 1.9 | premières → < 1.9.3 | 1.9.3 |