CVE-2021-24487

CVE-2021-24487 concerns the WordPress plugin St-Daily-Tip (versions ≤ 4.7). The vulnerability arises from a lack of CSRF protection and insufficient sanitisation/escaping when saving the setting “Default Text to Display if no tips,” allowing a logged-in attacker to cause a stored Cross-Site Scrip...

CVE-2020-24487

CVE-2020-24487 entry is rejected/not used and does not represent an active vulnerability.