← Back

Stock In & Out

stock_in_&_out

Vendor: Stock In & Out Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24346
1Stock In & Out Project
1Stock In & Out
Jun 17, 2026
Jun 14, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the ech...Show more
The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issueShow less