Not rated
CVE-2021-24485 The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could…
Description
The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Special Text Boxes 5.9 | earliest → < 5.9.110 | 5.9.110 |