Files
CVEs-PoC/2021/CVE-2021-24534.md
2025-09-29 21:09:30 +02:00

787 B

CVE-2021-24534

Description

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "php_id" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue.

POC

Reference

Github