rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-24374 Jetpack < 9.8 - Carousel Module Non-Published Page/Post Attachment Comment Leak
The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.
Problem types: cwe_id: CWE-639
description: CWE-639 Authorization Bypass Through User-Controlled Key
Affected products: vendor: Automattic
product: Jetpack – WP Security, Backup, Speed, & Growth
Credits: lang: en
value: nguyenhg_vcs
Published: 2021-06-21T19:18:21.000Z
CVE-2021-24375 Motor theme < 3.1.0 - Local File Inclusion
Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_quick_view AJAX handlers of the Motor WordPress theme before 3.1.0 allows an unauthenticated attacker access to arbitrary files in the server file system, and to execute arbitrary php scripts found on the server file system. We found no vulnerability for uploading files with this theme, so any scripts to be executed must already be on the server file system.
Problem types: cwe_id: CWE-22
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products: vendor: Stockware
product: Motor
Credits: lang: en
value: Harald Eilertsen (Jetpack)
Published: 2021-07-06T11:03:26.000Z
CVE-2021-24376 Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"
The Autoptimize WordPress plugin before 2.7.8 attempts to delete malicious files (such as .php) form the uploaded archive via the "Import Settings" feature, after its extraction. However, the extracted folders are not checked and it is possible to upload a zip which contained a directory with PHP file in it and then it is not removed from the disk. It is a bypass of CVE-2020-24948 which allows sending a PHP file via the "Import Settings" functionality to achieve Remote Code Execution.
Problem types: cwe_id: CWE-434
description: CWE-434 Unrestricted Upload of File with Dangerous Type
Affected products: vendor: Unknown
product: Autoptimize
Credits: lang: en
value: Marcin Węgłowski
Published: 2021-06-21T19:18:22.000Z
CVE-2021-24377 Autoptimize < 2.7.8 - Race Condition leading to RCE
The Autoptimize WordPress plugin before 2.7.8 attempts to remove potential malicious files from the extracted archive uploaded via the 'Import Settings' feature, however this is not sufficient to protect against RCE as a race condition can be achieved in between the moment the file is extracted on the disk but not yet removed. It is a bypass of CVE-2020-24948.
Problem types: cwe_id: CWE-362
description: CWE-362 Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization)
Affected products: vendor: Unknown
product: Autoptimize
Credits: lang: en
value: Marcin Węgłowski
Published: 2021-06-21T19:18:23.000Z
CVE-2021-24378 Autoptimize < 2.7.8 - Authenticated Stored XSS via File Upload
The Autoptimize WordPress plugin before 2.7.8 does not check for malicious files such as .html in the archive uploaded via the 'Import Settings' feature. As a result, it is possible for a high privilege user to upload a malicious file containing JavaScript code inside an archive which will execute when a victim visits index.html inside the plugin directory.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Autoptimize
Credits: lang: en
value: Marcin Węgłowski
Published: 2021-06-21T19:18:24.000Z
CVE-2021-24379 Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass
The Comments Like Dislike WordPress plugin before 1.1.4 allows users to like/dislike posted comments, however does not prevent them from replaying the AJAX request to add a like. This allows any user (even unauthenticated) to add unlimited like/dislike to any comment. The plugin appears to have some Restriction modes, such as Cookie Restriction, IP Restrictions, Logged In User Restriction, however, they do not prevent such attack as they only check client side
Problem types: cwe_id: CWE-863
description: CWE-863 Incorrect Authorization
Affected products: vendor: Unknown
product: Comments Like Dislike
Credits: lang: en
value: Phu Tran from techlabcorp.com
Published: 2021-06-21T19:18:25.000Z
CVE-2021-24380 Shantz WordPress QOTD <= 1.2.2 - Arbitrary Setting Update via CSRF
The Shantz WordPress QOTD WordPress plugin through 1.2.2 is lacking any CSRF check when updating its settings, allowing attackers to make logged in administrators change them to arbitrary values.
Problem types: cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Shantz WordPress QOTD
Credits: lang: en
value: Prashant Karman Patel
Published: 2021-08-16T10:48:18.000Z
CVE-2021-24381 NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting
The Ninja Forms Contact Form WordPress plugin before 3.5.8.2 does not sanitise and escape the custom class name of the form field created, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress
Credits: lang: en
value: Rodel Plasabas
Published: 2021-10-25T13:20:32.000Z
CVE-2021-24382 Smart Slider 3 < 3.5.0.9 - Authenticated Stored Cross-Site Scripting (XSS)
The Smart Slider 3 Free and pro WordPress plugins before 3.5.0.9 did not sanitise the Project Name before outputting it back in the page, leading to a Stored Cross-Site Scripting issue. By default, only administrator users could access the affected functionality, limiting the exploitability of the vulnerability. However, some WordPress admins may allow lesser privileged users to access the plugin's functionality, in which case, privilege escalation could be performed.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Nextend
product: Smart Slider 3
vendor: Nextend
product: Smart Slider 3
Credits: lang: en
value: Hardik Solanki
lang: en
value: blackangel
Published: 2021-06-14T13:37:14.000Z
CVE-2021-24383 WP Google Maps < 8.1.12 - Authenticated Stored Cross-Site Scripting (XSS)
The WP Google Maps WordPress plugin before 8.1.12 did not sanitise, validate of escape the Map Name when output in the Map List of the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: WP Google Maps
product: WP Google Maps
Credits: lang: en
value: Mohammed Adam
Published: 2021-06-21T19:18:26.000Z
CVE-2021-24384 JoomSport < 5.1.8 - Unauthenticated PHP Object Injection
The joomsport_md_load AJAX action of the JoomSport WordPress plugin before 5.1.8, registered for both unauthenticated and unauthenticated users, unserialised user input from the shattr POST parameter, leading to a PHP Object Injection issue. Even though the plugin does not have a suitable gadget chain to exploit this, other installed plugins could, which might lead to more severe issues such as RCE
Problem types: cwe_id: CWE-502
description: CWE-502 Deserialization of Untrusted Data
Affected products: vendor: Unknown
product: JoomSport – for Sports: Team & League, Football, Hockey & more
Credits: lang: en
value: Bugbang
Published: 2021-07-06T11:03:27.000Z
CVE-2021-24385 Filebird 4.7.3 - Unauthenticated SQL Injection
The Filebird Plugin 4.7.3 introduced a SQL injection vulnerability as it is making SQL queries without escaping user input data from a HTTP post request. This is a major vulnerability as the user input is not escaped and passed directly to the get_col function and it allows SQL injection. The Rest API endpoint which invokes this function also does not have any required permissions/authentication and can be accessed by an anonymous user.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Ninja Team
product: FileBird – WordPress Media Library Folders & File Manager
Credits: lang: en
value: Ravi Chandra (10up)
Published: 2021-07-12T19:20:50.000Z
CVE-2021-24386 WP SVG Images < 3.4 - Authenticated (author+) Stored XSS via SVG
The WP SVG images WordPress plugin before 3.4 did not sanitise the SVG files uploaded, which could allow low privilege users such as author+ to upload a malicious SVG and then perform XSS attacks by inducing another user to access the file directly. In v3.4, the plugin restricted such upload to editors and admin, with an option to also allow author to do so. The description of the plugin has also been updated with a security warning as upload of such content is intended.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: KubiQ
product: WP SVG images
Credits: lang: en
value: Rasi
Published: 2021-07-06T11:03:28.000Z
CVE-2021-24387 Real Estate 7 < 3.1.1 - Reflected Cross-Site Scripting (XSS)
The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Contempoinc
product: WP Pro Real Estate 7
Credits: lang: en
value: Ex.Mi
Published: 2021-07-06T11:03:29.000Z
CVE-2021-24388 Vik Rent Car < 1.1.7 - CSRF to Stored XSS
In the VikRentCar Car Rental Management System WordPress plugin before 1.1.7, there is a custom filed option by which we can manage all the fields that the users will have to fill in before saving the order. However, the field name is not sanitised or escaped before being output back in the page, leading to a stored Cross-Site Scripting issue. There is also no CSRF check done before saving the setting, allowing attackers to make a logged in admin set arbitrary Custom Fields, including one with XSS payload in it.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: E4J s.r.l.
product: VikRentCar Car Rental Management System
Credits: lang: en
value: Satyender Yadav
Published: 2021-07-06T11:03:29.000Z
CVE-2021-24389 FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)
The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Chimpstudio
product: WP Foodbakery
vendor: Chimpstudio
product: FoodBakery
Credits: lang: en
value: Truoc Phan - Techlab Corporation
Published: 2021-07-06T11:03:30.000Z
CVE-2021-24390 Alipay <= 3.7.2 - Authenticated SQL Injection
A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-06T11:09:19.000Z
CVE-2021-24391 Cashtomer <= 1.0.0 - Authenticated SQL Injection
An editid GET parameter of the Cashtomer WordPress plugin through 1.0.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Cashtomer
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-06T11:09:20.000Z
CVE-2021-24392 WordPress Membership SwiftCloud.io <= 1.0 - Authenticated SQL Injection
An id GET parameter of the WordPress Membership SwiftCloud.io WordPress plugin through 1.0 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: WordPress Membership SwiftCloud.io
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-06T11:09:21.000Z
CVE-2021-24393 Comment Highlighter <= 0.13 - Authenticated SQL Injection
A c GET parameter of the Comment Highlighter WordPress plugin through 0.13 is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Comment Highlighter
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-06T11:09:22.000Z
CVE-2021-24394 Easy Testimonial Manager <= 1.2.0 - Authenticated SQL Injection
An id GET parameter of the Easy Testimonial Manager WordPress plugin through 1.2.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Easy Testimonial Manager
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-06T11:09:22.000Z
CVE-2021-24395 Embed Youtube Video <= 1.0 - Authenticated SQL Injection
The editid GET parameter of the Embed Youtube Video WordPress plugin through 1.0 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Embed Youtube Video
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-06T11:09:23.000Z
CVE-2021-24396 GSEOR <= 1.3 - Authenticated SQL Injection
A pageid GET parameter of the GSEOR – WordPress SEO Plugin WordPress plugin through 1.3 is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: GSEOR – WordPress SEO Plugin
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:05:58.000Z
CVE-2021-24397 MicroCopy <= 1.1.0 - Authenticated SQL Injection
The edit functionality in the MicroCopy WordPress plugin through 1.1.0 makes a get request to fetch the related option. The id parameter used is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: MicroCopy
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:00.000Z
CVE-2021-24398 Responsive 3D Slider <= 1.2 - Authenticated SQL Injection
The Add new scene functionality in the Responsive 3D Slider WordPress plugin through 1.2 uses an id parameter which is not sanitised, escaped or validated before being inserted to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is passed twice so if we pass time as 5 seconds it takes 10 seconds to return since the query is ran twice.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: RESPONSIVE 3D SLIDER
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:02.000Z
CVE-2021-24399 The Sorter <= 1.0 - Authenticated SQL Injection
The check_order function of The Sorter WordPress plugin through 1.0 uses an `area_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: The Sorter
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:03.000Z
CVE-2021-24400 Display users <= 2.0.0 - Authenticated SQL Injection
The Edit Role functionality in the Display Users WordPress plugin through 2.0.0 had an `id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: Display Users
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:05.000Z
CVE-2021-24401 WP Domain Redirect <= 1.0 - Authenticated SQL Injection
The Edit domain functionality in the WP Domain Redirect WordPress plugin through 1.0 has an `editid` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: WP Domain Redirect
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:07.000Z
CVE-2021-24402 WP iCommerce <= 1.1.1 - Authenticated (contributor+) SQL Injection
The Orders functionality in the WP iCommerce WordPress plugin through 1.1.1 has an `order_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. The feature is available to low privilege users such as contributors
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: WP iCommerce – the first interactive ecommerce for wordpress
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:08.000Z
CVE-2021-24403 WordPress Page Contact <= 1.0 - Authenticated (editor+) SQL Injection
The Orders functionality in the WordPress Page Contact plugin through 1.0 has an order_id parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. The feature is available to low privilege users such as contributors
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: WordPress Page Contact
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:10.000Z
CVE-2021-24404 WP-Board <= 1.1 (beta) - Unauthenticated SQL Injection
The options.php file of the WP-Board WordPress plugin through 1.1 beta accepts a postid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. This is a time based SQLI and in the same function vulnerable parameter is passed twice so if we pass time as 5 seconds it takes 10 seconds to return since the query ran twice.
Problem types: cwe_id: CWE-89
description: CWE-89 SQL Injection
Affected products: vendor: Unknown
product: WP-Board
Credits: lang: en
value: Syed Sheeraz Ali of Codevigilant
Published: 2021-09-20T10:06:11.000Z
CVE-2021-24405 Easy Cookie Policy <= 1.6.2 - Broken Access Control to Stored Cross-Site Scripting
The Easy Cookies Policy WordPress plugin through 1.6.2 is lacking any capability and CSRF check when saving its settings, allowing any authenticated users (such as subscriber) to change them. If users can't register, this can be done through CSRF. Furthermore, the cookie banner setting is not sanitised or validated before being output in all pages of the frontend and the backend settings one, leading to a Stored Cross-Site Scripting issue.
Problem types: cwe_id: CWE-863
description: CWE-863 Incorrect Authorization
Affected products: vendor: IZSoft
product: Easy Cookies Policy
Credits: lang: en
value: 0xB9
Published: 2021-07-06T11:03:31.000Z
CVE-2021-24406 wpForo Forum < 1.9.7 - Open Redirect
The wpForo Forum WordPress plugin before 1.9.7 did not validate the redirect_to parameter in the login form of the forum, leading to an open redirect issue after a successful login. Such issue could allow an attacker to induce a user to use a login URL redirecting to a website under their control and being a replica of the legitimate one, asking them to re-enter their credentials (which will then in the attacker hands)
Problem types: cwe_id: CWE-601
description: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
Affected products: vendor: gVectors Team
product: wpForo Forum
Credits: lang: en
value: Hosein_vita
Published: 2021-07-06T11:03:32.000Z
CVE-2021-24407 Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)
The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: TieLabs
product: Jannah
Credits: lang: en
value: Truoc Phan from Techlab Corporation
Published: 2021-07-06T11:03:33.000Z
CVE-2021-24408 Prismatic < 2.8 - Contributor+ Stored XSS
The Prismatic WordPress plugin before 2.8 does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in the frontend, however, higher privilege users, such as editor could exploit this without the need of approval, and even when the blog disallows the unfiltered_html capability.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Jeff Starr
product: Prismatic
Credits: lang: en
value: apple502j
Published: 2021-07-12T19:20:51.000Z
CVE-2021-24409 Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)
The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Jeff Starr
product: Prismatic
Credits: lang: en
value: apple502j
Published: 2021-07-12T19:20:52.000Z
CVE-2021-24410 Telugu Bible Verse Daily <= 1.0 - CSRF to Stored XSS
The తెలుగు బైబిల్ వచనములు WordPress plugin through 1.0 is lacking any CSRF check when saving its settings and verses, and do not sanitise or escape them when outputting them back in the page. This could allow attackers to make a logged in admin change the settings, as well as add malicious verses containing JavaScript code in them, leading to Stored XSS issues
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: తెలుగు బైబిల్ వచనములు
Credits: lang: en
value: Ashish Upsham
Published: 2021-08-16T10:48:19.000Z
CVE-2021-24411 Social Tape <= 1.0 - CSRF to Stored XSS
The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
cwe_id: CWE-352
description: CWE-352 Cross-Site Request Forgery (CSRF)
Affected products: vendor: Unknown
product: Social Tape
Credits: lang: en
value: Ashish Upsham
Published: 2021-08-16T10:48:19.000Z
CVE-2021-24412 Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting
The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode
Problem types: cwe_id: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
Affected products: vendor: Unknown
product: Html5 Audio Player – Audio Player for WordPress
Credits: lang: en
value: Michał Lipiński
Published: 2021-10-18T13:45:36.000Z