CVE-2021-24953
07.03.2022, 09:15
The Advanced iFrame WordPress plugin before 2022 does not sanitise and escape the ai_config_id parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
| Vendor | Product | Version |
|---|---|---|
| tinywebgallery | advanced_iframe | 𝑥 < 2022 |
𝑥
= Vulnerable software versions