CVE-2021-24592
30.08.2021, 15:15
The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
| Vendor | Product | Version |
|---|---|---|
| yoohooplugins | sitewide_notice | 𝑥 < 2.3 |
𝑥
= Vulnerable software versions