← Back to CVE List

CVE-2021-24658

Published: 2021-08-23T12:15Z
Last Modified: 2024-11-21T05:53Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled) > MITRE Terms of Use apply – see LICENSE‑MITRE.txt