CVE-2021-25048

The CVE-2021-25048 entry concerns the WordPress KingComposer plugin (versions up to 2.9.6). The vulnerability is a stored cross-site scripting (XSS) flaw resulting from missing authorization checks, CSRF protection, and input sanitisation when creating profiles, allowing any authenticated user to...