WordPress · Helpful Wordpress Plugin · CVE-2021-24841
Name of the Vulnerable Software and Affected Versions:
Helpful WordPress plugin versions prior to 4.4.59
Description:
The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of some settings, even when the unfiltered html capability is disallowed.
Recommendations:
For versions prior to 4.4.59, update to version 4.4.59 or later to resolve the issue.