cleantalk
Vulnerabilities and Security Researches

iQ Block Country, CVE-2021-36873

CVE, Research URL

CVE-2021-36873

Application

iQ Block Country

Published on
Sep 23, 2021
Research Description
Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress iQ Block Country plugin (versions <= 1.2.11). Vulnerable parameter: &blockcountry_blockmessage.
Affected versions
max 1.2.12.
Status
vulnerable