CVE-2021-24785

The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...

CVE-2021-24785

CVE-2021-24785 affects the WordPress plugin Great Quotes (versions ≤ 1.0.0). The vulnerability is a stored Cross-Site Scripting (XSS) in the Quote and Author fields, arising from failure to sanitize/escape input. Public references describe that high-privilege users could perform XSS even with unf...

CVE-2021-24785 Great Quotes <= 1.0.0 - Admin+ Stored Cross-Site Scripting

The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...