CVE-2021-24621

The CVE-2021-24621 entry concerns the WP Courses LMS WordPress plugin (versions before 2.0.44). The vulnerability is due to inadequate sanitisation of the Video Embed Code, allowing an authenticated high-privilege user to inject malicious code, leading to Stored Cross-Site Scripting. Affected com...