CVE-2021-38353

The CVE relates to the WordPress plugin “Dropdown and scrollable Text” (≤ 2.0). The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw in the content parameter of the ~/index.php file, allowing attackers to inject arbitrary web scripts. Affected versions are up to 2.0; the root cause is...