← CVE Intelligence

CVE-2021-24350

Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel.

Affected (CNA)

Vendor / productVersions
Unknown / Visitorsaffected 0.3 through 0.3

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.