CVE-2021-25034

The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortcode is used, leading to Reflected Cross-Site Scripting issues

Date published : 2022-02-28

https://wpscan.com/vulnerability/c4e50dd2-450f-413d-b15f-ece413e42157