CVE-2021-24298: Ibenic Simple Giveaways

Medium severity, CVSS 6.1. EPSS: 3.5% chance of exploitation in the next 30 days.

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS

Affected products

• Ibenic Simple Giveaways: before 2.36.2 (fixed in 2.36.2)

Published 2021-05-24. Last modified 2026-06-17.