TI-2021-06894 CVE-2021-24611 · GHSA-q4g3-xp8v-q7h5Keywords & Meta <= 3.0 - CSRF to Stored Cross-Site Scripting (XSS)Priority LOW 24The Keyword Meta WordPress plugin through 3.0 does not sanitise of escape its settings before outputting them back in the page after they are saved, allowing for Cross-Site Scripting issues.CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00319 · Published 2021-09-06 · No fix listed CWE-352