Vulnerabilities (CVE)

Filtered by vendor Bootstrapped Subscribe
Filtered by product Dynamic Widgets
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24933 1 Bootstrapped 1 Dynamic Widgets 2024-11-21 3.5 LOW 5.4 MEDIUM
The Dynamic Widgets WordPress plugin through 1.5.16 does not escape the prefix parameter before outputting it back in an attribute when using the term_tree AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting issue