Security Advisory

CVE-2021-24437

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-08-30 14:11:18

Last updated 2024-08-03 19:28:24

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Favicon by RealFaviconGenerator WordPress plugin through 1.3.20 does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting (XSS) which is executed in the context of a logged administrator.

← Browse all CVEs View on cve.org ↗