CVE-2021-24470

The CVE-2021-24470 affects the Yada Wiki WordPress plugin (versions before 3.4.1). Root cause: the shortcode anchor attribute was not sanitised/validated/escaped, causing a Stored XSS. Evidence in connected docs includes PoC payloads demonstrating exploitation and confirmation that the issue is f...