CVE-2021-24247

Name of the Vulnerable Software and Affected Versions Contact Form Check Tester WordPress plugin versions prior to 1.0.3

Description The issue allows any registered user to leave an XSS payload in the plugin settings, which can be triggered by any user visiting them. This could potentially allow for privilege escalation. The estimated number of potentially affected devices is not specified.

Recommendations For Contact Form Check Tester WordPress plugin versions prior to 1.0.3, consider uninstalling the plugin as the vendor has decided to close it, and there is no available update to fix the issue. As a temporary workaround, consider restricting access to the plugin settings to minimize the risk of exploitation.