CVE-2021-46782 – Pricing Table by Supsystic < 1.9.5 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2021-46782

The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting El plugin Pricing Table by Supsystic de WordPress versiones anteriores a 1.9.5, no escapa el parámetro tab antes de devolverlo en un atributo en el panel de administración, conllevando a un ataque de tipo Cross-Site Scripting Reflejado • https://wpscan.com/vulnerability/39e69487-aa53-4b78-a422-12515a6449bf • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •