← CVE Intelligence

CVE-2021-24874

Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue < 3.1.31 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

Affected (CNA)

Vendor / productVersions
Unknown / Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblueaffected 3.1.31 before 3.1.31

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.