TI-2021-07212 CVE-2021-24933 · GHSA-r699-gfhh-m9f6Dynamic Widgets <= 1.5.16 - Reflected Cross-Site ScriptingPriority LOW 25The Dynamic Widgets WordPress plugin through 1.5.16 does not escape the prefix parameter before outputting it back in an attribute when using the term_tree AJAX action (available to any authenticated users), leading to a…CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.006 · Published 2022-02-28 · No fix listed CWE-79