CVE

CVE-2021-24283

CVE-2021-24283

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.

Source: CVE-2021-24283

Exit mobile version