medium5.4
CVE-2021-24597
The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts …
Impact
The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending on the payload used
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| You-Shang Project | You-Shang | through 1.0.1 |