CVE-2021-24699

The CVE-2021-24699 entry concerns the WordPress plugin Easy Media Download (versions before 1.1.7). Multiple connected sources confirm a concrete flaw: the plugin does not escape the text argument of its shortcode, enabling Stored Cross-Site Scripting (XSS) by users with as little as Contributor ...