Magic Post Voice

magic-post-voice

Vendor: Magic Post Voice Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-39315

1Magic Post Voice Project

1Magic Post Voice

Jun 17, 2026

Dec 14, 2021

N/A· v4

6.1 MEDIUM· v3

4.3 MEDIUM· v2

The Magic Post Voice WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the ids parameter found in the ~/inc/admin/main.php file which allows attackers to inject arbitrary web scripts, in versions up to...Show more