TI-2021-06879 CVE-2021-24596 · GHSA-c4rx-6458-242xyouForms for WordPress <= 1.0.5 - Authenticated Stored Cross-Site ScriptingPriority LOW 27The youForms for WordPress plugin through 1.0.5 does not sanitise escape the Button Text field of its Templates, allowing high privilege users (editors and admins) to perform Cross-Site Scripting attacks even when the un…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.02754 · Published 2021-09-20 · No fix listed CWE-79