Sitewide Notice WP, CVE-2021-24592

CVE, Research URL: CVE-2021-24592
Home page URL: Security reports for Sitewide Notice WP
Application: Sitewide Notice WP
Published on: Aug 30, 2021
Research Description: The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected versions: max 2.3.
Status: vulnerable