title: Simple Giveaways < 2.36.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)
description: The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Simple Giveaways – Grow your business, email lists and traffic with contests
vendor: Igor Benic
versions:
lessThan: 2.36.2, status: affected, version: 2.36.2, versionType: custom
}