CVE-2021-24479

The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue...

CVE-2021-24479

CVE-2021-24479 concerns the WordPress plugin DrawBlog (≤ 0.90). The vulnerability arises because the plugin does not sufficiently sanitize/validate certain settings before echoing them on the page, enabling an authenticated stored Cross-Site Scripting (XSS) condition. The issue requires authentic...