mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-27 02:02:23 +02:00
871 B
871 B
CVE-2021-24420
Description
The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table.
POC
Reference
- https://wpscan.com/vulnerability/426eafb1-0261-4e7e-8c70-75bf4c476f18
- https://wpscan.com/vulnerability/426eafb1-0261-4e7e-8c70-75bf4c476f18
Github
No PoCs found on GitHub currently.