CVE-2021-24599 | BDVDB-2026-160121 Detail

Email Encoder – Protect Email Addresses

Description#

The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/625a272f-5c69-4f6a-8eee-32f70cd4a558

Exploit#

No public exploit known

History#

Version 12021-09-06Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.