TI-2021-16711 CVE-2021-39344 · GHSA-76r7-g7hm-6rf5KJM Admin Notices <= 2.0.1 Authenticated Stored Cross-Site ScriptingPriority LOW 27The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin/class-kjm-admin-notices-admin.php file…CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.01079 · Published 2021-10-15 · No fix listed CWE-79