CVE-2021-38358 MoolaMojo <= 0.7.4.1 Reflected Cross-Site Scripting

The MoolaMojo WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the classes parameter found in the /views/button-generator.html.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.7.4.1...

CVE-2021-38358

Summary: CVE-2021-38358 affects the MoolaMojo WordPress plugin up to version 0.7.4.1. It is a Reflected Cross-Site Scripting (XSS) vulnerability exposed via the classes parameter in ~/views/button-generator.html.php, allowing injection of arbitrary scripts. Impact: as per CVSSv3.1 metrics, base s...