CVE-2021-24953

Summary: CVE-2021-24953 affects the WordPress plugin “Advanced iFrame” (versions before 2022). The vulnerability stems from insufficient sanitisation/escaping of the ai_config_id parameter when it is echoed back on an admin page, enabling a Reflected Cross-Site Scripting (XSS) attack. The issue i...