Vulnerabilities and Security Researches

Better Find and Replace, CVE-2021-24676

CVE, Research URL: CVE-2021-24676
Home page URL: Security reports for Better Find and Replace
Application: Better Find and Replace
Published on: Oct 04, 2021
Research Description: The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
Affected versions: max 1.3.4.
Status: vulnerable