Medium severity6.1NVD Advisory· Published Feb 14, 2022· Updated Jun 17, 2026
CVE-2021-24874
CVE-2021-24874
Description
The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.31 does not escape the lang and pid parameter before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Newsletter, SMTP, Email marketing and Subscribe forms by Sendinbluedescription
- Range: <3.1.31
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/28d34cc1-2294-4409-a60f-c8c441eb3f2dnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.