Security Advisory

CVE-2021-24432

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-01-16 15:49:30

Last updated 2025-06-11 17:10:22

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Advanced AJAX Product Filters WordPress plugin does not sanitise the 'term_id' POST parameter before outputting it in the page, leading to reflected Cross-Site Scripting issue.

← Browse all CVEs View on cve.org ↗