CVE-2021-24582 ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)

The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue...

CVE-2021-24582

The CVE-2021-24582 entry applies to the ThinkTwit WordPress plugin, where versions before 1.7.1 do not sanitise/escape the plugin’s "Consumer key" setting before outputting it on the settings page, causing an authenticated Stored XSS vulnerability. Affected product: ThinkTwit WordPress plugin (ve...