CVE-2021-42549

CVE-2021-42549 concerns the WordPress Lets-Box plugin where versions prior to 1.15.3 suffer a reflected XSS in the search functionality due to insufficient input validation. The vulnerability allows an unauthenticated user to craft a reflected Cross-Site Scripting attack via the search endpoint. ...