Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24534

PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "php_id" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown PhoneTrack Meu Site Manager

  • 0.1 to ≤ 0.1affected

References