WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-101475)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress Plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in the Wordpress Plugin Support Board, which stems from the product not doing validation of the data in the notes field. An attacker can execute client-side code through this vulnerability.