Non notée
CVE-2021-24854 The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could…
Description
The QR Redirector WordPress plugin before 1.6.1 does not sanitise and escape some of the QR Redirect fields, which could allow users with a role as low as Contributor perform Stored Cross-Site Scripting attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| QR Redirector 1.6 | premières → < 1.6.1 | 1.6.1 |