← CVE Intelligence

CVE-2021-25086

Advanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admins viewing it

Affected (CNA)

Vendor / productVersions
Unknown / Advanced Page Visit Counter – Advanced WordPress Visit Counteraffected 6.1.2 before 6.1.2

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.