Skip to content
OpenAdvisories
Unscored CVE-2021-24582 EUVD-2021-11494GHSA-7xg4-c3g7-r42r

ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)

Published Sep 20, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue.

Affected products

VendorProductAffectedFixed
— ThinkTwit 1.7.1 – < 1.7.1 1.7.1

References