CVE-2021-38337

CVE-2021-38337 affects the RSVPMaker Excel WordPress plugin (versions up to 1.1). The vulnerability is a Reflected Cross-Site Scripting flaw due to a reflected $_SERVER["PHP_SELF"] value in the file ~/phpexcel/PHPExcel/Shared/JAMA/docs/download.php, allowing attackers to inject arbitrary web scri...