Approved changes feed: RSS · Atom

cpe:2.3:a:go_web_solutions:wp_customer_reviews:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGo Web Solutions (ace010de-6ced-5ae4-b644-df25d932fd77)
ProductWp Customer Reviews (33e254fb-8347-5c2d-96ec-e0611a29e638)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24296 vulnerable 2026-06-08 05:30:04.137395 WP Customer Reviews < 3.5.6 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Customer Reviews WordPress plugin before 3.5.6 did not sanitise some of its settings, allowing high privilege users such as administrators to set XSS payloads in them which will then be triggered in pages where reviews are enabled
Published: 2021-05-24T10:58:04.000Z
Updated: 2024-08-03T19:28:23.433Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.