CVE-2021-24332

The Autoptimize WordPress plugin before 2.8.4 was missing proper escaping and sanitisation in some of its settings, allowing high privilege users to set XSS payloads in them, leading to stored Cross-Site Scripting issues...

CVE-2021-24332

CVE-2021-24332 affects the WordPress Autoptimize plugin before version 2.8.4. The vulnerability stems from missing escaping and sanitisation in certain settings, enabling highly privileged (authenticated) users to inject XSS payloads that are stored (stored XSS). Documented impacts include authen...

CVE-2021-24332 Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)

The Autoptimize WordPress plugin before 2.8.4 was missing proper escaping and sanitisation in some of its settings, allowing high privilege users to set XSS payloads in them, leading to stored Cross-Site Scripting issues...