Vulnerabilities > Thememason

DATE CVE VULNERABILITY TITLE RISK
2021-08-02 CVE-2021-24503 Cross-site Scripting vulnerability in Thememason Popular Brand Icons - Simple Icons
The Popular Brand Icons – Simple Icons WordPress plugin before 2.7.8 does not sanitise or validate some of its shortcode parameters, such as "color", "size" or "class", allowing users with a role as low as Contributor to set Cross-Site payload in them.
network
low complexity
thememason CWE-79
5.4