Vulnerabilities > Tipsandtricks HQ > Compact WP Audio Player > Low

DATE	CVE	VULNERABILITY TITLE	RISK
2021-10-18	CVE-2021-24734	Cross-site Scripting vulnerability in Tipsandtricks-Hq Compact WP Audio Player The Compact WP Audio Player WordPress plugin before 1.9.7 does not escape some of its shortcodes attributes, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. network tipsandtricks-hq CWE-79	3.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.