CVE-2021-24643

The CVE-2021-24643 entry concerns the WordPress plugin WP Map Block (versions before 1.2.3). The root cause is insufficient escaping of certain attributes in the block, enabling Stored Cross-Site Scripting (XSS) when a user with a low privilege (contributor) interacts with the block (e.g., adding...