CVE-2021-4378

CVE-2021-4378 concerns the WordPress plugin WP Quick FrontEnd Editor . The vulnerability is a Stored Cross‑Site Scripting flaw caused by insufficient input sanitization and output escaping, affecting versions up to and including 5.5. The impact allows an attacker with minimal permissions (e.g., s...

CVE-2021-4383

CVE-2021-4383 affects the WP Quick FrontEnd Editor plugin for WordPress. Technical details in the connected documents show a vulnerability in page-editing due to missing capability checks, making it possible for low-authenticated users (e.g., subscribers) to edit or create any page or post on sit...

CVE-2021-4363

The CVE-2021-4363 entry concerns the WordPress plugin WP Quick FrontEnd Editor . Affected component: the function save_content_front which uses print_r on user-supplied $_REQUEST values, causing Reflected Cross‑Site Scripting in versions up to and including 5.5 due to insufficient input sanitizat...