WordPress Cross-Site Scripting Vulnerability (CNVD-2021-95139)

WordPress is the WordPress (Wordpress) Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers. WordPress plugin ClickBank Affiliate Ads version 1.20 before there is a cross-site scripting vulnerability, the vulnerability stems from the plugin for the lack of effective filtering and escaping of settings, allowing high-privilege users to perform cross-site scripting attacks, even if the unfiltered html is not allowed. No detailed vulnerability details are available at this time.