Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-25015 1 Mycred 1 Mycred 2024-11-21 6.1 Medium
The myCred WordPress plugin before 2.4 does not sanitise and escape the search query before outputting it back in the history dashboard page, leading to a Reflected Cross-Site Scripting issue
CVE-2017-20008 1 Mycred 1 Mycred 2024-11-21 6.1 Medium
The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting