← CVE Intelligence

CVE-2021-24420

Request a Quote < 2.3.4 - Authenticated Stored XSS PUBLISHED

Description (CNA)

The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table.

Affected (CNA)

Vendor / productVersions
Unknown / Request a Quoteaffected 2.3.4 before 2.3.4

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.