← Back

Ultimate Nofollow Project

ultimate_nofollow_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Ultimate Nofollow
ultimate_nofollow
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24817
1Ultimate Nofollow Project
1Ultimate Nofollow
Jun 17, 2026
Dec 13, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Ultimate NoFollow WordPress plugin through 1.4.8 does not sanitise and escape the href attribute of its shortcodes, allowing users with a role as low as contributor to perform Cross-Site Scripting attacks