← CVE Intelligence

CVE-2021-24437

Favicon by RealFaviconGenerator <= 1.3.20 - Reflected Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of a logged administrator.

Affected (CNA)

Vendor / productVersions
Unknown / Favicon by RealFaviconGeneratoraffected 1.3.20 through 1.3.20

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.