CVE-2021-24632

Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting

EPSS 0.8%CWE-79

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

Affected products

Unknown · Recipe Card Blocks by WPZOOM

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://wpscan.com/vulnerability/55cd6d5e-92c1-407a-8c0f-f89d415ebb66