CVE-2021-34653

The CVE-2021-34653 entry pertains to the WordPress plugin WP Fountain, with vulnerability in versions up to and including 1.5.9. It is a Reflected Cross-Site Scripting (XSS) flaw caused by using $_SERVER['PHP_SELF'] in wp-fountain.php, enabling injection of arbitrary scripts. The connected source...