Alojapro Widget

alojapro_widget

Vendor: Alojapro • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2021-24530

1Alojapro

1Alojapro Widget

Jun 17, 2026

Sep 20, 2021

N/A· v4

4.8 MEDIUM· v3

3.5 LOW· v2

The Alojapro Widget WordPress plugin through 1.1.15 doesn't properly sanitise its Custom CSS settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is dis...Show more