CVE-2021-24678

The CVE-2021-24678 vulnerability affects the WordPress CM Tooltip Glossary plugin prior to version 3.9.21, where certain glossary_tooltip shortcode attributes are not escaped. This can permit stored cross-site scripting (XSS) and can be exploited by users with as little as Contributor privileges....