title: Email Encoder < 2.1.2 - Reflected Cross Site Scripting
description: The Email Encoder – Protect Email Addresses WordPress plugin before 2.1.2 has an endpoint that requires no authentication and will render a user supplied value in the HTML response without escaping or sanitizing the data.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Email Encoder – Protect Email Addresses
vendor: Unknown
versions:
lessThan: 2.1.2, status: affected, version: 2.1.2, versionType: custom
}