CVE-2021-24596

The CVE-2021-24596 entry concerns the youForms for WordPress plugin (versions up to 1.0.5). The vulnerability is an authenticated stored Cross-Site Scripting (XSS) due to incomplete sanitization/escaping of the Button Text field in Templates, enabling high-privilege users (editors and admins) to ...