medium5.4
CVE-2021-24812
The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues…
Impact
The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpdeveloper | Betterlinks | before 1.2.6 |