Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-25012

Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site Scripting

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Pz-LinkCard

  • 2.4.4.4 to ≤ 2.4.4.4affected

References