Skip to content
OpenAdvisories
Unscored CVE-2021-24424 EUVD-2021-11336GHSA-c7hp-m6ff-5q28

WP Reset < 1.90 - Authenticated Stored XSS

Published Jul 12, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extra_data parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue

Affected products

VendorProductAffectedFixed
— WP Reset – Most Advanced WordPress Reset Tool 1.90 – < 1.90 1.90

References