CVE-2021-24545

CVE-2021-24545 Es una vulnerabilidad XSS encontrada en un plugin cuya distribución ha sido suspendida. Vulnerabilidad XSS en la descripción del plugin HTML Author Bio de WordPress. Esta vulnerabilidad se debe a una validación inadecuada del parámetro description en /wp-admin/profile.php. Un...

CVE-2021-24545

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...

CVE-2021-24545

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...

CVE-2021-24545 WP HTML Author Bio <= 1.2.0 - Author+ Stored Cross-Site Scripting

The WP HTML Author Bio WordPress plugin through 1.2.0 does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could...

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin WP HTML Author Bio prior to version 1.2.0, which stems from the software's lack of valid validation and escaping of a user's HTML, allowing them to use maliciou...