CVE-2021-24503: Improper Neutralization of Input During Web Page Generation

The Popular Brand Icons – Simple Icons WordPress plugin before 2.7.8 does not sanitise or validate some of its shortcode parameters, such as "color", "size" or "class", allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still hav...

PT-2021-16025

Name of the Vulnerable Software and Affected Versions The Popular Brand Icons – Simple Icons WordPress plugin versions prior to 2.7.8 Description The issue allows users with a role as low as Contributor to set Cross-Site payload in some shortcode parameters, such as color, size, or class, due to ...