CVE-2021-39319

The CVE-2021-39319 entry concerns the WordPress plugin duoFAQ — Responsive, Flat, Simple FAQ. A Reflected Cross-Site Scripting (XSS) flaw exists via the msg parameter in the file ~/duogeek/duogeek-panel.php, affecting versions up to and including 1.4.8. Attackers could inject arbitrary scripts th...