CVE-2021-24298 — Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS
Published: 2021-05-24 · CVSS: Unscored
The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7