Filtered by vendor Alojapro Subscriptions
Filtered by product Alojapro Widget Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24530 1 Alojapro 1 Alojapro Widget 2024-11-21 4.8 Medium
The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed