CVE-2021-24603

creationtimestamp| type| source ---|---|--- 2021-09-06 14:40:38+00:00| seen| https://t.me/cibsecurity/28275...

CVE-2021-24603

The Site Reviews WordPress plugin before 5.13.1 does not sanitise some of its Review Details when adding a review as an admin, which could allow them to perform Cross-Site Scripting attacks when the unfilteredhtml is disallowed...

CVE-2021-24603

CVE-2021-24603 affects the WordPress Site Reviews plugin (before 5.13.1). The vulnerability is an authenticated stored XSS due to insufficient sanitisation of Review Details added by admins, which can be triggered when unfiltered_html is disallowed. The issue is exploitable by authenticated attac...