Dna88 Highlight vulnerabilities

1 vulnerability

Known vulnerabilities in Dna88 Highlight, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2021-24591dna88highlight+2
EPSS score
0.62%
The Highlight WordPress plugin before 0.9.3 does not sanitise its CustomCSS setting, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed