CVE-2021-24296: Gowebsolutions Wp Customer Reviews

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The WP Customer Reviews WordPress plugin before 3.5.6 did not sanitise some of its settings, allowing high privilege users such as administrators to set XSS payloads in them which will then be triggered in pages where reviews are enabled

Affected products

• Gowebsolutions Wp Customer Reviews: before 3.5.6 (fixed in 3.5.6)

Published 2021-05-24. Last modified 2026-06-17.