CVE-2018-21014

The CVE-2018-21014 entry concerns the WordPress plugin BuddyBoss Media (plugin version up to 3.2.3). The connected sources confirm a Stored Cross‑Site Scripting (XSS) vulnerability in this plugin, which can affect WordPress sites using BuddyBoss Media. The NVD entry describes the vulnerability as...