← Back

Multisite User Sync/unsync

multisite_user_sync/unsync

Vendor: Obtaininfotech • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-25038
1Obtaininfotech
1Multisite User Sync/unsync
Jun 17, 2026
Mar 7, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmus_source_blog and wmus_record_per_page parameters before outputting them back in attributes, leading to Reflected...Show more
The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmus_source_blog and wmus_record_per_page parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issuesShow less