Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24676

Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Better Find and Replace

  • 1.2.9 to < 1.2.9affected

References