Medium severity6.1NVD Advisory· Published Oct 18, 2021· Updated Jun 17, 2026
CVE-2021-24617
CVE-2021-24617
Description
The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:gamepress_project:gamepress:*:*:*:*:*:wordpress:*:*Range: <=1.1.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/3e262cd7-ca64-4190-8d8c-38b07bbe63e0nvdThird Party Advisory
News mentions
0No linked articles in our index yet.