CVE-2021-24434

The CVE-2021-24434 issue affects the Glass WordPress plugin (versions 1.3.2 and earlier). The root cause is that the plugin does not sanitize or escape the Glass Pages setting before output, enabling Stored Cross-Site Scripting (XSS). Additionally, there is no CSRF protection when saving plugin s...