Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24420

Request a Quote < 2.3.4 - Authenticated Stored XSS

Description

The Request a Quote WordPress plugin before 2.3.4 did not sanitise and escape some of its quote fields when adding/editing a quote as admin, leading to Stored Cross-Site scripting issues when the quote is output in the 'All Quotes" table.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Request a Quote

  • 2.3.4 to < 2.3.4affected

References