Non notée
CVE-2021-24582 The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it…
Description
The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ThinkTwit 1.7 | premières → < 1.7.1 | 1.7.1 |