RSS   Vulnerabilities for 'About author box'   RSS

2021-11-29
 
CVE-2021-24745

CWE-79
 

 
The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which could allow user with a role as low as contributor to perform Cross-Site Scripting attacks.

 

 >>> Vendor: Wpkube 2 Products
Cool tag cloud
About author box


Copyright 2022, cxsecurity.com

 

Back to Top