CVE-2021-36848

The CVE applies to WordPress plugin Social Media Feather ≤ v2.0.4, where an authenticated admin+ can trigger a stored XSS due to insufficient sanitization of settings. This could allow execution of JavaScript in a user’s browser. A fix is available in v2.0.5 and later; users should update to at l...