← back
CVE-2021-24599

Email Encoder < 2.1.2 - Reflected Cross Site Scripting

EPSS 0.8%CWE-79
The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →