Skip to content
OpenAdvisories

Archive

14 February 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Unscored —
    CVE-2021-24904 Public exploit

    Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting

    The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered…