CVE-2021-24676

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p55

Published

Oct 4, 2021 (Oct 4, 2021)

Modified

Jun 17, 2026

Description

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue

Vendors: codesolz
Products: better find and replace
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.