medium6.1
CVE-2021-24432
The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-…
Impact
The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-Site Scripting issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Berocket | Advanced Ajax Product Filters | before 1.5.4.7 |