medium4.8
CVE-2021-24624
The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist setti…
Impact
The MP3 Audio Player for Music, Radio & Podcast by Sonaar WordPress plugin before 2.4.2 does not properly sanitize or escape data in some of its Playlist settings, allowing high privilege users to perform Cross-Site Scripting attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonaar | Mp3 Audio Player For Music\, Radio \& Podcast | before 2.4.2 |