CVE-2021-24600

The WP Dialog WordPress plugin through 1.2.5.5 does not sanitise and escape some of its settings before outputting them in pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2021-16115

Name of the Vulnerable Software and Affected Versions WP Dialog WordPress plugin versions 1.2.5.5 and earlier Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the plugin not sanitising and escaping some of its settings before outputting them in page...