Skip to content
OpenAdvisories
Unscored CVE-2021-24632 EUVD-2021-11544GHSA-fv2r-phrh-ff5j

Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting

Published Sep 27, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

Affected products

VendorProductAffectedFixed
— Recipe Card Blocks by WPZOOM 2.8.1 – < 2.8.1 2.8.1

References