CVE-2021-24180

CVE-2021-24180 affects the WordPress plugin Related Posts for WordPress (pre-2.0.4). The vulnerability arises from unvalidated input and lack of output encoding in the plugin’s Related Posts feature, allowing a Reflected Cross-Site Scripting (XSS) via the lang GET parameter while editing a post. ...