medium5.4
CVE-2021-24603
The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perfor…
Impact
The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Geminilabs | Site Reviews | before 5.13.1 |