CVE-2021-24409

The CVE-2021-24409 entry concerns the Prismatic WordPress plugin (prior to v2.8). The vulnerability is a reflected Cross-Site Scripting (XSS) flaw caused by the plugin not escaping the 'tab' GET parameter before echoing it into an HTML attribute, leading to execution in the context of a logged-in...