NetSight
medium4.8

CVE-2021-24344

The Easy Preloader WordPress plugin through 1.0.0 does not sanitise its setting fields, leading to authenticated (admin+) Stored Cross-Site scripting issues

Impact

The Easy Preloader WordPress plugin through 1.0.0 does not sanitise its setting fields, leading to authenticated (admin+) Stored Cross-Site scripting issues

Affected products

VendorProductAffected versions
Easy Preloader ProjectEasy Preloader
through 1.0.0

Weakness classification

References