TI-2021-15930 CVE-2021-38323 · GHSA-23r5-px4g-3cgxRentPress <= 6.6.4 Reflected Cross-Site ScriptingPriority LOW 29The RentPress WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the selections parameter found in the ~/src/rentPress/AjaxRequests.php file which allows attackers to inject arbitrary web scripts, in ve…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00938 · Published 2021-09-09 · No fix listed CWE-79