CVE-2021-24617

CVE-2021-24617: GamePress <= 1.1.0 - Reflected Cross-Site Scripting

Vendor Unknown
Product GamePress – The Game Database Plugin
Weakness CWE-79 · XSS
Published October 18, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues

Key dates

02Disclosure timeline

October 18, 2021 CVE published
August 3, 2024 Record updated