5.4
Medium
CVE-2021-36826 Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS)…
Description
Authenticated (subscriber or higher user role if allowed to access projects) Stored Cross-Site Scripting (XSS) vulnerability in weDevs WP Project Manager plugin <= 2.4.13 versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Project Manager (WordPress plugin) 2.4 | earliest → 2.4.13 | No fix stated |