WordPress · The Typebot · CVE-2021-24902
Name of the Vulnerable Software and Affected Versions:
The Typebot | Build beautiful conversational forms WordPress plugin versions prior to 1.4.3
Description:
The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of the Publish ID setting, even when the unfiltered html capability is disallowed.
Recommendations:
For versions prior to 1.4.3, update to version 1.4.3 or later to resolve the issue.