Vulnerabilities > WP Special Textboxes Project

DATE CVE VULNERABILITY TITLE RISK
2021-10-25 CVE-2021-24485 Cross-site Scripting vulnerability in Wp-Special-Textboxes Project Wp-Special-Textboxes
The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
network
low complexity
wp-special-textboxes-project CWE-79
4.8