Medium severity4.7NVD Advisory· Published Dec 13, 2021· Updated Jun 17, 2026
CVE-2021-42546
CVE-2021-42546
Description
Insufficient Input Validation in the search functionality of Wordpress plugin Use-Your-Drive prior to 1.18.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.
Affected products
3cpe:2.3:a:wpcloudplugins:use-your-drive:*:*:*:*:*:wordpress:*:*+ 1 more
- cpe:2.3:a:wpcloudplugins:use-your-drive:*:*:*:*:*:wordpress:*:*range: <1.18.3
- (no CPE)range: unspecified
- Range: <1.18.3
Patches
Vulnerability mechanics
References
1- www.wpcloudplugins.com/wp-content/plugins/use-your-drive/_documentation/index.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.