CVE-2021-38339

The CVE-2021-38339 entry affects the WordPress plugin Simple Matted Thumbnails, version ≤ 1.01. The vulnerability is a Reflected Cross-Site Scripting flaw caused by a reflected value in $_SERVER["PHP_SELF"] within the simple-matted-thumbnail.php file, enabling an attacker to inject arbitrary web ...