cve/2021/CVE-2021-24812.md
2025-09-29 21:09:30 +02:00

812 B

CVE-2021-24812

Description

The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.

POC

Reference

Github