cleantalk
Vulnerabilities and Security Researches

myCred – Points, Rewards, Gamification, Ranks, Badges & Loyalty Plugin, 9293961e-9678-4d25-ad20-59ae79dc5c43

Published on
-
Research Description
Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program &#8211; myCred [mycred] < 2.4.4 myCred &lt; 2.4.4 - Reflected Cross-Site Scripting The plugin does not escape some URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Affected versions
max 2.4.4.
Status
vulnerable