CVE-2021-24533

The Maintenance WordPress plugin before 4.03 does not sanitise or escape some of its settings, allowing high privilege users such as admin to se Cross-Site Scripting payload in them even when the unfilteredhtml capability is disallowed, which will be triggered in the frontend...

CVE-2021-24533

CVE-2021-24533 affects the WordPress Maintenance plugin prior to version 4.03. The issue is an authenticated stored XSS where high-privilege users (e.g., admin) can inject payloads into certain plugin settings due to insufficient sanitization/escaping, with the payload triggered in the frontend e...