WPFront User Role Editor, CVE-2021-24984

CVE, Research URL: CVE-2021-24984
Home page URL: Security reports for WPFront User Role Editor
Application: WPFront User Role Editor
Published on: Dec 27, 2021
Research Description: The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting
Affected versions: max 3.2.1.11184.
Status: vulnerable