Skip to content
OpenAdvisories
Unscored CVE-2021-25012 EUVD-2021-11924GHSA-8xqr-mvwg-chr4

Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site Scripting

Published Mar 28, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues

Affected products

VendorProductAffectedFixed
— Pz-LinkCard 2.4.4.4 – ≤ 2.4.4.4 —

References