← CVE Intelligence

CVE-2021-24899

Media-Tags <= 3.2.0.2 - Admin+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Media-Tags WordPress plugin through 3.2.0.2 does not sanitise and escape any of its Labels settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_htnl capability is disallowed.

Affected (CNA)

Vendor / productVersions
Unknown / Media Tagsaffected 3.2.0.2 through 3.2.0.2

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.