Skip to content
OpenAdvisories
Unscored CVE-2021-25071 EUVD-2021-11983GHSA-6h3h-vvg4-9qcw

Akismet Privacy Policies <= 2.0.1 - Reflected Cross-Site Scripting

Published Mar 28, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WordPress plugin through 2.0.1 does not sanitise and escape the translation parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Affected products

VendorProductAffectedFixed
— Akismet Privacy Policies 2.0.1 – ≤ 2.0.1 —

References