TI-2021-07074 CVE-2021-24792 · GHSA-m65r-7jgg-xwhpShiny Buttons <= 1.1.0 - Unauthenticated Stored Cross-Site ScriptingPriority LOW 30The Shiny Buttons WordPress plugin through 1.1.0 does not have any authorisation and CSRF in place when saving a template (wpbtn_save_template function hooked to the init action), nor sanitise and escape them before outp…CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01186 · Published 2021-12-13 · No fix listed CWE-79
