CVE-2021-24723

The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages.

Date published : 2021-11-01

https://wpscan.com/vulnerability/0a46ae96-41e5-4b52-91c3-409f7387aecc