SportsPress – Sports Club & League Manager, CVE-2021-24578
- CVE, Research URL
- Published on
- Dec 21, 2021
- Research Description
- The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its match_day parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue
- Affected versions
-
max 2.7.9.
- Status
-
vulnerable