medium6.1
CVE-2021-24676
The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading t…
Impact
The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Codesolz | Better Find And Replace | before 1.2.9 |