CVE-2021-39357

The CVE-2021-39357 entry concerns the Leaky Paywall WordPress plugin (versions up to and including 4.16.5). Root cause: insufficient input validation and sanitization in the class.php file, enabling authenticated stored XSS when an administrator can inject scripts (affecting multi-site setups or ...