CVE-2021-24476

CVE-2021-24476 concerns the WordPress plugin Steam Group Viewer (v2.1 and earlier). The vulnerability arises because the plugin does not sanitize/escape the“三Steam Group Address” setting before outputting it on pages, enabling an authenticated Stored Cross-Site Scripting (XSS) issue. The impact s...