Not rated
CVE-2021-24888 The ImageBoss WordPress plugin before 3.0.6 does not sanitise and escape its Source Name setting, which could allow high…
Description
The ImageBoss WordPress plugin before 3.0.6 does not sanitise and escape its Source Name setting, which could allow high privilege users to perform Cross-Site Scripting attacks
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ImageBoss – Images Up To 60% Smaller & CDN 3.0 | earliest → < 3.0.6 | 3.0.6 |