CVE-2021-24897

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2021-24897

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

CVE-2021-24897: Improper Neutralization of Input During Web Page Generation

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field available only with classic editor when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

PT-2022-9495

Name of the Vulnerable Software and Affected Versions Add Subtitle WordPress plugin versions prior to 1.1.1 Description The issue allows users with a role as low as contributor to perform Cross-Site Scripting attacks due to the lack of sanitization or escaping of the sub-title field when output i...