← CVE Intelligence

CVE-2021-24135

WP Customer Reviews < 3.4.3 - Multiple Unauthenticated and Low Priv Authenticated Stored XSS PUBLISHED

Description (CNA)

Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead to multiple Stored Cross-Site Scripting vulnerabilities allowing remote attackers to inject arbitrary JavaScript code or HTML.

Affected (CNA)

Vendor / productVersions
Unknown / WP Customer Reviewsaffected 3.4.3 before 3.4.3

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.