Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-38355 EUVD-2021-24808GHSA-hvm3-c8w4-35mp

Bug Library <= 2.0.3 Reflected Cross-Site Scripting

Published Sep 10, 2021 · Updated May 2, 2025 · Assigned by Wordfence

Description

The Bug Library WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the successimportcount parameter found in the ~/bug-library.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.0.3.

Affected products

VendorProductAffectedFixed
Bug Library Bug Library 2.0.3 – ≤ 2.0.3 —

References