I-Plugins Whmcs Bridge
2 CVEs affecting I-Plugins Whmcs Bridge. Latest disclosed: 2022-02-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-4074 | Medium | 6.4 | 2022-01-18 | The WHMCS Bridge WordPress plugin is vulnerable to Stored Cross-Site Scripting via the cc_whmcs_bridge_url parameter found in the ~/whmcs-bridge/bridge_cp.php… |
CVE-2021-25112 | Medium | 6.1 | 2022-02-28 | The WHMCS Bridge WordPress plugin before 6.4b does not sanitise and escape the error parameter before outputting it back in admin dashboard, leading to a Refle… |