Security Advisory

CVE-2021-24495

6.1
MEDIUM

Vulnerability Description

The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the 'id' parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue.
Published Date August 9, 2021
Official Source NIST NVD Advisory