CVE-2021-25039

State: PUBLISHED · Published: 2022-03-07 · Updated: 2024-08-03 · Assigner: WPScan

Description

The WordPress Multisite Content Copier/Updater WordPress plugin before 2.1.0 does not sanitise and escape the wmcc_content_type, wmcc_source_blog and wmcc_record_per_page parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

CWE

CWE-79 — CWE-79 Cross-site Scripting (XSS)

Affected

Unknown / WordPress Multisite Content Copier/Updater — v=2.1.0 <2.1.0 [affected]

CVSS

(none)

References

https://wpscan.com/vulnerability/c92eb2bf-0a5d-40b9-b0be-1820e7b9bebb x_refsource_MISC

Source

cvelistV5-main/cves/2021/25xxx/CVE-2021-25039.json