CVE-2021-39349

The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /includes/admin/class-author-bio-box-admin.php file which allowed attackers with administrative user access to inject arbitrar...

CVE-2021-39349 Author Bio Box <= 3.3.1 Authenticated Stored Cross-Site Scripting

The Author Bio Box WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the /includes/admin/class-author-bio-box-admin.php file which allowed attackers with administrative user access to inject arbitrar...

CVE-2021-39349

The CVE describes a Stored Cross-Site Scripting vulnerability in the WordPress Author Bio Box plugin (affected versions up to 3.3.1; PatchStack notes up to 3.4.0). The root cause is insufficient input validation and sanitization across several parameters in includes/admin/class-author-bio-box-adm...