CVE-2021-24443

The About Me widget of the Youzify – BuddyPress Community, User Profile, Social Network & Membership WordPress plugin before 1.0.7 does not properly sanitise its Biography field, allowing any authenticated user to set Cross-Site Scripting payloads in it, which will be executed when viewing the...

CVE-2021-24443

creationtimestamp| type| source ---|---|--- 2024-01-09 03:08:05+00:00| seen| https://t.me/arpsyndicate/2704...

CVE-2021-24443

The CVE-2021-24443 entry concerns the Youzify WordPress plugin (About Me widget) prior to version 1.0.7. The vulnerability stems from improper sanitisation of the Biography field, enabling an authenticated user to inject Cross-Site Scripting payloads that execute when an affected profile is viewe...