CVE-2021-24768

The WP RSS Aggregator WordPress plugin before 4.19.2 does not properly sanitise and escape the URL to Blacklist field, allowing malicious HTML to be inserted by high privilege users even when the unfilteredhtml capability is disallowed, which could lead to Cross-Site Scripting issues...

PT-2021-16265

Name of the Vulnerable Software and Affected Versions: WP RSS Aggregator WordPress plugin versions prior to 4.19.2 Description: The issue arises from the improper sanitization and escaping of the URL to Blacklist field, allowing high privilege users to insert malicious HTML even when the unfilter...