← CVE Intelligence

CVE-2021-24597

You Shang <= 1.0.1 - Authenticated Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending on the payload used

Affected (CNA)

Vendor / productVersions
Unknown / 有赏 You Shangaffected 1.0.1 through 1.0.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.