Aller au contenu
Se connecter
Non notée

CVE-2021-24619 The Per page add to head WordPress plugin through 1.4.4 does not properly sanitise one of its setting, allowing…

Description

The Per page add to head WordPress plugin through 1.4.4 does not properly sanitise one of its setting, allowing malicious HTML to be inserted by high privilege users even when the unfiltered_html capability is disallowed, which could lead to Cross-Site Scripting issues.

Produits et versions touchés

Produit Versions touchées Corrigé en
Per page add to head 1.4.4 Pas de correctif indiqué

Autres CVE de Per page add to head

Les 2 CVE de Per page add to head →
CVE-2021-24586 The Per page add to head WordPress plugin before 1.4.4 is lacking any CSRF check when saving its settings, which could… Non notée
Suivre cette CVE