← CVE Intelligence

CVE-2021-24678

CM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Scripting attacks

Affected (CNA)

Vendor / productVersions
Unknown / CM Tooltip Glossary – Better SEO and UEX for your WP siteaffected 3.9.21 before 3.9.21

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.