CVE-2021-24613

The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfilteredhtml capability is disallowed...

PT-2021-16129

Name of the Vulnerable Software and Affected Versions Post Views Counter WordPress plugin versions prior to 1.3.5 Description The issue allows high privilege users to perform Cross-Site Scripting attacks in the frontend, even when the unfiltered html capability is disallowed, due to the plugin no...

CVE-2021-24613: Improper Neutralization of Input During Web Page Generation

The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfilteredhtml capability is disallowed...