CVE-2021-24574
23.08.2021, 12:15
The Simple Banner WordPress plugin before 2.10.4 does not sanitise and escape one of its settings, allowing high privilege users such as admin to use Cross-Site Scripting payload even when the unfiltered_html capability is disallowed.
| Vendor | Product | Version |
|---|---|---|
| simple_banner_project | simple_banner | 𝑥 < 2.10.4 |
𝑥
= Vulnerable software versions