CVE-2021-24517
The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2021.18 does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in them even when the unfiltered_html capability is disallowed
- Score
- CVSS 3.1 5.4 Medium
- Status
- Modified - contact@wpscan.com
- Published
- 2021-09-06
- Last modified
- 2024-08-03
- Weaknesses
- CWE-79
Affected products
- Stop Spammers (Trumani)
- Comments (Unknown)
- Forms (Unknown)
- Stop Spammers Security Block Spam Users (Unknown)
References
- https://wpscan.com/vulnerability/f440edd8-94fe-440a-8a5b-e3d24dcfcbc1
