CVE-2021-24985

The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting the...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

patch plugins.trac.wordpress.org
report wpscan.com