Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24335

Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS

Description

The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Car Repair Services & Auto Mechanic

  • 4.0 to < 4.0affected

References