Non évaluée
When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allo...
CVE-2021-24323
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
When taxes are enabled, the "Additional tax classes" field was not properly sanitised or escaped before being output back in the admin dashboard, allowing high privilege users such as admin to use XSS payloads even when the unfiltered_html is disabled
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- report wpscan.com