Unrated
When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allo...
CVE-2021-24323
First seen on SecPulse
Original description The description as published by the source.
When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfiltered_html is disabled
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- report wpscan.com