The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with classic editor) when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2022-03-14T14:40:58
Updated: 2024-08-03T19:49:13.999Z
Reserved: 2021-01-14T00:00:00
Link: CVE-2021-24897
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-03-14T15:15:08.507
Modified: 2024-11-21T05:53:58.253
Link: CVE-2021-24897
Redhat
No data.