CVE-2021-46781 Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site Scripting

The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2021-46781

The CVE-2021-46781 entry concerns the WordPress plugin Coming Soon by Supsystic (versions before 1.7.6). The issue is that the plugin does not sanitise and escape the tab parameter before echoing it in an attribute in the admin dashboard, causing a Reflected Cross-Site Scripting (XSS) vulnerabili...