The Special Text Boxes WordPress plugin before 5.9.110 does not sanitise or escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is dis…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00617·Published 2021-10-25·Fixed in 5.9.110CWE-79