cleantalk
Vulnerabilities and Security Researches

Cool Tag Cloud, CVE-2021-24682

CVE, Research URL

CVE-2021-24682

Application

Cool Tag Cloud

Published on
Nov 01, 2021
Research Description
The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
Affected versions
max 2.26.
Status
vulnerable