TI-2021-06841 CVE-2021-24556 · GHSA-559v-8mcf-64p4
Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Priority LOW 30
The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST parameters, insertin…