WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-59596)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. cross-site scripting vulnerability exists in versions prior to Request a Quote WordPress plugin 2.3.4, which stems from the plugin’s failure to Clear and escape some of its quote fields when adding or editing quotes as an administrator, resulting in a cross-site scripting issue when quotes are output in the ““All Quotes”” table. No detailed vulnerability details are available at this time.