Medium severity4.8NVD Advisory· Published Oct 25, 2021· Updated Jun 17, 2026
CVE-2021-24485
CVE-2021-24485
Description
The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Special Text Boxesdescription
- Range: <5.9.110
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/4a6b278a-4c11-4624-86bf-754212979643nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.