Lucene search
JrXnmWPVDB-ID:50BE0EBF-FE6D-41E5-8AF9-0D74F33AEB57HistoryDec 21, 2021 - 12:00 a.m.
Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting
2021-12-2100:00:00
JrXnm
wpscan.com
13
mailchimp
cross-site scripting
reflected
sanitise
field name
field type
EPSS
0.001
Percentile
31.7%
The plugin does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
PoC
Related
patchstack
patchstack
osv
osv
CVE-2021-24985
2022-01-24 08:15:09
wpexploit
wpexploit
Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting
2021-12-21 00:00:00
cve
cve
CVE-2021-24985
2022-01-24 08:15:09
prion
prion
Cross site scripting
2022-01-24 08:15:00
openvas
openvas
WordPress Easy Forms for Mailchimp Plugin < 6.8.6 XSS Vulnerability
2022-01-26 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2021-24985
2022-01-24 08:15:09
cnvd
cnvd
WordPress Easy Forms for Mailchimp plugin cross-site scripting vulnerability
2022-01-26 00:00:00