CVE-2024-3921

CVE-2024-3921 (Gianism) affects Gianism WordPress plugin up to version 5.1.0. It enables Admin+ Stored XSS due to insufficient sanitisation/escaping of certain settings, potentially allowing admin users to execute scripts even when unfiltered_html is disallowed. The Patchstack entry notes a fix i...

CVE-2024-3921 Gianism <= 5.1.0 - Admin+ Stored XSS

The Gianism WordPress plugin through 5.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-3921 Gianism <= 5.1.0 - Admin+ Stored XSS

The Gianism WordPress plugin through 5.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...