The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2021-11-29T08:25:28

Updated: 2024-08-05T21:45:24.558Z

Reserved: 2021-11-24T00:00:00

Link: CVE-2017-20008

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-11-29T09:15:07.027

Modified: 2024-11-21T03:22:26.393

Link: CVE-2017-20008

cve-icon Redhat

No data.