CVE-2021-24984

The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2021-24984

CVE-2021-24984 affects the WPFront User Role Editor WordPress plugin prior to version 3.2.1.11184. The issue stems from insufficient sanitisation and escaping of the changes-saved parameter before it is output in the admin dashboard, enabling a Reflected Cross-Site Scripting (XSS) condition. Impa...