CVE-2021-24854

The CVE-2021-24854 entry concerns the WordPress QR Redirector plugin prior to version 1.6.1, where missing sanitisation/escaping of QR Redirect fields enables Stored Cross-Site Scripting (XSS) accessed by a user with as little as Contributor permissions. Several connected sources confirm the vuln...