cleantalk
Vulnerabilities and Security Researches

Pz-LinkCard, CVE-2021-25012

CVE, Research URL

CVE-2021-25012

Application

Pz-LinkCard

Published on
Mar 28, 2022
Research Description
The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues
Affected versions
max 2.4.5.3.
Status
vulnerable