CVE-2021-24365: Improper Neutralization of Input During Web Page Generation

The Admin Columns WordPress plugin Free before 4.3.2 and Pro before 5.5.2 allowed to configure individual columns for tables. Each column had a type. The type "Custom Field" allowed to choose an arbitrary database column to display in the table. There was no escaping applied to the contents of...

PT-2021-15901

Name of the Vulnerable Software and Affected Versions Admin Columns WordPress plugin Free versions prior to 4.3.2 Admin Columns WordPress plugin Pro versions prior to 5.5.2 Description The issue allows configuration of individual columns for tables, with a column type of "Custom Field" enabling t...