CVE-2021-39325

Published: 2021-09-20T20:15Z

Last Modified: 2024-11-21T06:19Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the load_previews function found in the ~/OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.6.0. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt