Non notée
CVE-2021-25015 The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the…
Description
The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a Reflected Cross-Site Scripting issue
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin 2.4 | premières → < 2.4 | 2.4 |