CVE-2021-24287 Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)

2021-05-1411:38:18

CWE-79

WPScan

www.cve.org

0.002 Low

EPSS

Percentile

65.1%

JSON

The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue

CNA Affected

[
  {
    "product": "Select All Categories and Taxonomies, Change Checkbox to Radio Buttons",
    "vendor": "Moove Agency",
    "versions": [
      {
        "lessThan": "1.3.2",
        "status": "affected",
        "version": "1.3.2",
        "versionType": "custom"
      }
    ]
  }
]