Non notée
CVE-2021-24812 The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could…
Description
The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| BetterLinks – Shorten, Track and Manage any URL 1.2 | premières → < 1.2.6 | 1.2.6 |