CVE-2021-39343
CVE-2021-39343 – MPL-Publisher WordPress plugin is affected up to version 1.30.2. The flaw is a Stored Cross-Site Scripting (XSS) caused by insufficient input validation/sanitization in multiple parameters handled by ~/libs/PublisherController.php. An attacker with administrative privileges can i...