Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24603

Site Reviews < 5.13.1 - Authenticated Stored XSS

Description

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Site Reviews

  • 5.13.1 to < 5.13.1affected

References