CVE-2021-24607
08.11.2021, 18:15
The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed.
| Vendor | Product | Version |
|---|---|---|
| wooassist | storefront_footer_text | 𝑥 ≤ 1.0.1 |
𝑥
= Vulnerable software versions