CVE-2021-24617

GamePress <= 1.1.0 - Reflected Cross-Site Scripting

EPSS 0.7%CWE-79

The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues

Produtos afetados

Unknown · GamePress – The Game Database Plugin

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://wpscan.com/vulnerability/3e262cd7-ca64-4190-8d8c-38b07bbe63e0