← CVE Intelligence

CVE-2021-24124

WP Shieldon 1.6.3 - Unauthenticated Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown could lead to privileged escalation.

Affected (CNA)

Vendor / productVersions
Unknown / WP Shieldonaffected 1.6.3 through 1.6.3

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.