Medium severity6.1NVD Advisory· Published Oct 4, 2021· Updated Jun 17, 2026
CVE-2021-24676
CVE-2021-24676
Description
The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- WordPress/Better Find and Replacedescription
- Range: <1.2.9
- cpe:2.3:a:codesolz:better_find_and_replace:*:*:*:*:*:wordpress:*:*Range: <1.2.9
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/59589e74-f901-4f4d-81de-26ad19d1b7fdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.