Wpkube About Author Box vulnerabilities

1 vulnerability

Known vulnerabilities in Wpkube About Author Box, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2021-24745unknownabout author box+2
EPSS score
0.62%
The About Author Box WordPress plugin before 1.0.2 does not sanitise and escape the Social Profiles field values before outputting them in attributes, which could allow user with a role as low as contributor to perform Cross-Site Scripting attacks.