Patreon WordPress, CVE-2021-25026
- CVE, Research URL
- Home page URL
- Application
- Published on
- Mar 14, 2022
- Research Description
- The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
- Affected versions
-
max 1.8.2.
- Status
-
vulnerable