SEUR Oficial, CVE-2021-25005

CVE, Research URL: CVE-2021-25005
Home page URL: Security reports for SEUR Oficial
Application: SEUR Oficial
Published on: Jan 17, 2022
Research Description: The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected versions: Min -, max 1.7.2.
Status: vulnerable