CVE-2021-24811

Name of the Vulnerable Software and Affected Versions: The Shop Page WP WordPress plugin versions prior to 1.2.8

Description: The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of some Product fields, even when the unfiltered html capability is disallowed.

Recommendations: For versions prior to 1.2.8, update to version 1.2.8 or later to resolve the issue. As a temporary workaround, consider restricting the ability of high privilege users to edit Product fields until the update is applied.