← CVE Intelligence

CVE-2021-46781

Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting

Affected (CNA)

Vendor / productVersions
Unknown / Coming Soon by Supsysticaffected 1.7.6 before 1.7.6

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.