CVE-2021-24211 WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)

The WordPress Related Posts plugin through 3.6.4 contains an authenticated admin+ stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser...

CVE-2021-24211

The CVE-2021-24211 entry describes an authenticated (admin+) stored XSS vulnerability in the WordPress Related Posts plugin up to version 3.6.4, triggered via the title field on the settings page. Exploitation allows execution of JavaScript in a user’s browser. Affected software: WordPress Relate...