cleantalk
Vulnerabilities and Security Researches

Site Reviews, CVE-2021-24603

CVE, Research URL

CVE-2021-24603

Application

Site Reviews

Published on
Sep 06, 2021
Research Description
The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed
Affected versions
max 5.13.1.
Status
vulnerable