← voltar
CVE-2021-24899

Media-Tags <= 3.2.0.2 - Admin+ Stored Cross-Site Scripting

EPSS 0.6%CWE-79
The Media-Tags WordPress plugin through 3.2.0.2 does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_htnl capability is disallowed.
Produtos afetados
Unknown · Media Tags

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →