Admin Columns, CVE-2021-24366

CVE, Research URL: CVE-2021-24366
Home page URL: Security reports for Admin Columns
Application: Admin Columns
Published on: Jun 22, 2021
Research Description: The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and escape its Label settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Affected versions: max 4.3.
Status: vulnerable