CVE-2021-24443

The CVE-2021-24443 entry concerns the Youzify WordPress plugin (About Me widget) prior to version 1.0.7. The vulnerability stems from improper sanitisation of the Biography field, enabling an authenticated user to inject Cross-Site Scripting payloads that execute when an affected profile is viewe...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists i...

WordPress Youzify plugin <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Phu Tran in WordPress Youzify plugin versions = 1.0.6. Solution Update the WordPress Youzify plugin to the latest available version at least 1.0.7...