CVE-2021-24344

Easy Preloader <= 1.0.0 - Authenticated Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The Easy Preloader WordPress plugin through 1.0.0 does not sanitise its setting fields, leading to authenticated (admin+) Stored Cross-Site scripting issues

Affected (CNA)

Vendor / product	Versions
Unknown / Easy Preloader	affected 1.0.0 through 1.0.0

CWE

CWE-79

References

https://wpscan.com/vulnerability/6d6c1d46-5c3d-4d56-9728-2f94064132aa

ADP enrichment

CVE

No English description supplied.

https://wpscan.com/vulnerability/6d6c1d46-5c3d-4d56-9728-2f94064132aa