CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24734 | Compact WP Audio Player [compact-wp-audio-player] < 1.9.7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.9.7 | 1.9.7 | 2021-09-15 | — |
The Compact WP Audio Player plugin prior to version 1.9.7 contains insufficient escaping of shortcode parameters, enabling contributors and users with similar or higher privileges to inject and store malicious scripts that execute in the browsers of site visitors.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.