Vulnerabilities (CVE)

Filtered by vendor Getastra Subscribe
Filtered by product Wp Hardening
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24373 1 Getastra 1 Wp Hardening 2023-11-07 4.3 MEDIUM 6.1 MEDIUM
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripting issue.
CVE-2021-24372 1 Getastra 1 Wp Hardening 2023-11-07 4.3 MEDIUM 6.1 MEDIUM
The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue.