The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripting issue.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2021-06-21T19:18:20
Updated: 2024-08-03T19:28:23.763Z
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24373
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-06-21T20:15:08.900
Modified: 2024-11-21T05:52:56.343
Link: CVE-2021-24373
Redhat
No data.