CVE-2021-39340

The WordPress Notification plugin is affected by CVE-2021-39340 (up to v7.2.4). The vulnerability is a Stored Cross-Site Scripting (XSS) due to insufficient input validation/sanitization in multiple parameters within Settings.php, exploitable by attackers with administrative access on multi-site ...