The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortcode is used, leading to Reflected Cross-Site Scripting issues
CVSS
No CVSS.
References
Configurations
No configuration.
Information
Published : 2022-02-28 09:15
Updated : 2022-02-28 13:38
NVD link : CVE-2021-25034
Mitre link : CVE-2021-25034
JSON object : View
Products Affected
No product.
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
