← CVE Intelligence

CVE-2021-24601

WPFront Notification Bar < 2.1.0.08087 - Authenticated Stored XSS PUBLISHED

Description (CNA)

The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected (CNA)

Vendor / productVersions
Unknown / WPFront Notification Baraffected 2.1.0.08087 before 2.1.0.08087

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.