CVE-2021-4244

CVE-2021-4244 affects the yikes-inc-easy-mailchimp-extender WordPress plugin up to version 6.8.5. The vulnerability resides in admin/partials/ajax/add_field_to_form.php where manipulation of the arguments field_name, merge_tag, field_type, or list_id enables cross-site scripting. It can be exploi...