CVE-2021-25012

CVE-2021-25012: Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site Scripting

Vendor Unknown
Product Pz-LinkCard
Weakness CWE-79 · XSS
Published March 28, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues

Key dates

02Disclosure timeline

March 28, 2022 CVE published
August 3, 2024 Record updated