Vulnerabilities (CVE)

Filtered by vendor Wpkube Subscribe
Filtered by product About Author Box
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24745 1 Wpkube 1 About Author Box 2024-11-21 3.5 LOW 5.4 MEDIUM
The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which could allow user with a role as low as contributor to perform Cross-Site Scripting attacks.