CVE-2021-24545

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...

PT-2021-16065

Name of the Vulnerable Software and Affected Versions WP HTML Author Bio WordPress plugin versions 1.2.0 and earlier Description The issue allows users with a role as low as author to perform Cross-Site Scripting attacks against other users by injecting malicious JavaScript code into their bio,...

CVE-2021-24545: Improper Neutralization of Input During Web Page Generation

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...