Security Advisory

CVE-2021-24841

4.8
MEDIUM

Vulnerability Description

The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Published Date November 17, 2021
Official Source NIST NVD Advisory