CVE-2021-24519 — Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)
The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' field when adding or editing a Characteristic, allowing high…
Published: 2021-08-16 · CVSS: Unscored
The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' field when adding or editing a Characteristic, allowing high privilege users such as admin to use XSS payload in it, leading to an authenticated Stored Cross-Site Scripting issue
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7