CVE-2021-24617: Gamepress Project Gamepress

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues

Affected products

• Gamepress Project Gamepress: up to and including 1.1.0

Published 2021-10-18. Last modified 2026-06-17.