CVE-2021-24540

Affected software : Wonder Video Embed WordPress plugin (before v1.8). Issue : The plugin fails to escape parameters of the wonderplugin_video shortcode, enabling Stored XSS. Impact : Allows low-privilege users (Contributor) to inject and execute client-side scripts; CVE comments indicate potenti...