← CVE Intelligence

CVE-2021-24479

DrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue

Affected (CNA)

Vendor / productVersions
Unknown / DrawBlogaffected 0.90 through 0.90

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.