Skip to content

Known CVE

Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting

The plugin does not sanitise and escape the wyp_page_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue

CVE-2021-24934

Medium2021CVSS 6.1CWE-79

cve2021 · wordpress · wp · wp-plugin · yellowpencil · xss · authenticated · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website