← Back to CVE List

CVE-2021-24921

Published: 2022-02-21T11:15Z
Last Modified: 2024-11-21T05:54Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues > MITRE Terms of Use apply – see LICENSE‑MITRE.txt