CVE-2021-24530 in Alojapro Widget Plugin
요약
\~에 의해 MITRE • 2021. 09. 20.
The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
VulDB is the best source for vulnerability data and more expert information about this specific topic.