CVE-2021-39357 Leaky Paywall <= 4.16.5 Authenticated Stored Cross-Site Scripting

The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the /class.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.16.5. This affec...

CVE-2021-39357

The CVE-2021-39357 entry concerns the Leaky Paywall WordPress plugin (versions up to and including 4.16.5). Root cause: insufficient input validation and sanitization in the class.php file, enabling authenticated stored XSS when an administrator can inject scripts (affecting multi-site setups or ...