← CVE Intelligence

CVE-2021-24485

Special Text Boxes < 5.9.110 - Admin+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

Affected (CNA)

Vendor / productVersions
Unknown / Special Text Boxesaffected 5.9.110 before 5.9.110

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.