CVE-2021-25104
The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue
- Affected products
- Ocean Extra
- Oceanwp Ocean Extra
- < 1.9.5
- Fix
- Available
- CVSS 3.1
- 6.1 MEDIUM
- EPSS
- 1.4% (71th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2022-06-20
CVE-2021-25104 at NVD
1 known exploit for CVE-2021-25104
Proof-of-concept code and exploit modules indexed by Sploitus