Vulnerabilities (CVE)

Filtered by vendor Wp Dialog Project Subscribe
Filtered by product Wp Dialog
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24600 1 Wp Dialog Project 1 Wp Dialog 2024-02-28 3.5 LOW 4.8 MEDIUM
The WP Dialog WordPress plugin through 1.2.5.5 does not sanitise and escape some of its settings before outputting them in pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.