CVE-2021-42549

Insufficient Input Validation in the search functionality of WordPress plugin Lets-Box prior to 1.15.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.

Date published : 2021-12-13

https://www.wpcloudplugins.com/wp-content/plugins/lets-box/_documentation/index.html#releasenotes