medium5.4
CVE-2021-24211
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page.
Impact
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sovrn | Wordpress Related Posts | through 3.6.4 |