← CVE Intelligence

CVE-2021-24599

Email Encoder < 2.1.2 - Reflected Cross Site Scripting PUBLISHED

Description (CNA)

The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data.

Affected (CNA)

Vendor / productVersions
Unknown / Email Encoder – Protect Email Addressesaffected 2.1.2 before 2.1.2

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.