cleantalk
Vulnerabilities and Security Researches

Request a Quote, CVE-2021-24420

CVE, Research URL

CVE-2021-24420

Application

Request a Quote

Published on
Jul 13, 2021
Research Description
The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table.
Affected versions
Min -, max 2.3.7.
Status
vulnerable