Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24985

Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting

Description

The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Easy Forms for Mailchimp

  • 6.8.6 to < 6.8.6affected

References