Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24298

Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

Description

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Igor Benic Simple Giveaways – Grow your business, email lists and traffic with contests

  • 2.36.2 to < 2.36.2affected

References