CVE-2021-24682 – Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2021-24682

The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. El plugin Cool Tag Cloud de WordPress versiones anteriores a 2.26, no escapa del atributo style del shortcode cool_tag_cloud, lo que podría permitir a usuarios con un rol tan bajo como el de Contribuyente llevar a cabo ataques de tipo Cross-Site Scripting • https://wpscan.com/vulnerability/7dfdd50d-77f9-4f0a-8673-8f033c0b0e05 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •