CVE-2021-24597

The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending on the payload used...

PT-2021-16112

Name of the Vulnerable Software and Affected Versions You Shang WordPress plugin versions 1.0.1 and earlier Description The issue arises from the You Shang WordPress plugin not escaping its qrcode links settings, resulting in Stored Cross-Site Scripting issues. These issues can manifest in fronte...