Skip to content
Not rated

CVE-2021-24624 The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or…

Description

The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to perform Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
MP3 Audio Player for Music, Radio & Podcast by Sonaar 2.4 earliest → < 2.4.2 2.4.2
Track this CVE