Back to search
CVE-2021-24334
Published: Jun 1, 2021
Modified: Aug 3, 2024
PUBLISHED
Description
The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue.
| Vendor | Product | Versions |
|---|---|---|
Unknown | Instant Images – One Click Unsplash Uploads | affected 4.4.0.1 - < 4.4.0.1 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now