CVE-2021-24715

The WP Sitemap Page WordPress plugin before 1.7.0 does not properly sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-24715

The CVE-2021-24715 entry concerns the WordPress WP Sitemap Page plugin before 1.7.0, where improper sanitization/escaping of settings enables stored Cross-Site Scripting. Exploitation could allow high-privilege users to run JavaScript even when unfiltered_html is disallowed. Affected component: t...

CVE-2021-24715: Improper Neutralization of Input During Web Page Generation

The WP Sitemap Page WordPress plugin before 1.7.0 does not properly sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...