Description
The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Igor Benic | Simple Giveaways – Grow your business, email lists and traffic with contests | 2.36.2 – < 2.36.2 | 2.36.2 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- WordPress Simple Giveaways <2.36.2 - Cross-Site Scripting http/cves/2021/CVE-2021-24298.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.