Skip to content
OpenAdvisories
Unscored CVE-2021-24603 EUVD-2021-11515GHSA-j3qx-4gvc-v53m

Site Reviews < 5.13.1 - Authenticated Stored XSS

Published Sep 6, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed

Affected products

VendorProductAffectedFixed
— Site Reviews 5.13.1 – < 5.13.1 5.13.1

References