CVE-2021-24682

The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cooltagcloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24682 Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting

The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cooltagcloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24682

The CVE-2021-24682 entry concerns the WordPress Cool Tag Cloud plugin (versions prior to 2.26). The vulnerability is a Stored Cross-Site Scripting (XSS) flaw caused by failure to escape the style attribute in the cool_tag_cloud shortcode, enabling an attacker with as little as Contributor privile...