Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2021-38326

Post Title Counter <= 1.1 Reflected Cross-Site Scripting

Description

The Post Title Counter WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the notice parameter found in the ~/post-title-counter.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Post Title Counter Post Title Counter

  • 1.1 to ≤ 1.1affected

References