Security Advisory

CVE-2021-24955

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-12-13 10:41:29

Last updated 2024-08-03 19:49:13

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not escape the data parameter of the pp_get_forms_by_builder_type AJAX action before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue

← Browse all CVEs View on cve.org ↗