CVE-2021-24708 WP All Export < 1.3.1 - Admin+ Stored Cross-Site Scripting

The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24708

The CVE-2021-24708 entry corresponds to the WordPress plugin “Export any WordPress data to XML/CSV” (pre-1.3.1) and describes a stored Cross-Site Scripting (XSS) vulnerability in the Manage Exports UI: the plugin does not escape the Export name before output, enabling high-privilege users to trig...