CVE-2021-42548 — reflected XSS in search functionality of WP Cloud Plugins - Share-one-Drive

CVE-2021-42548

reflected XSS in search functionality of WP Cloud Plugins - Share-one-Drive PUBLISHED

Description (CNA)

Insufficient Input Validation in the search functionality of Wordpress plugin Share-one-Drive prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.

Affected (CNA)

Vendor / product	Versions
WP Cloud Plugins / Share-one-Drive	affected unspecified before 1.15.3

CWE

CWE-79

References

https://www.wpcloudplugins.com/wp-content/plugins/share-one-drive/_documentation/index.html#releasenotes

ADP enrichment

CVE

No English description supplied.

https://www.wpcloudplugins.com/wp-content/plugins/share-one-drive/_documentation/index.html#releasenotes