Beveiligingsadvies

CVE-2021-24782

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-13 10:40:51

Laatst bijgewerkt 2024-08-03 19:42:17

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Flex Local Fonts WordPress plugin through 1.0.0 does not escape the Class Name field when adding a font, which could allow hight privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

← Alle CVE's bekijken Bekijk op cve.org ↗