The Leaky Paywall WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via the ~/class.php file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 4.16.5. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.
Metrics
Affected Vendors & Products
References
History
Fri, 14 Feb 2025 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|

Status: PUBLISHED
Assigner: Wordfence
Published:
Updated: 2025-02-14T17:55:12.748Z
Reserved: 2021-08-20T00:00:00.000Z
Link: CVE-2021-39357

Updated: 2024-08-04T02:06:42.503Z

Status : Modified
Published: 2021-10-21T20:15:08.260
Modified: 2024-11-21T06:19:23.977
Link: CVE-2021-39357

No data.