CVE-2021-47982

Name of the Vulnerable Software and Affected Versions WP-Paginate version 2.1.3

Description A stored cross-site scripting issue exists where authenticated attackers can inject malicious scripts. This is achieved by submitting POST requests to the plugin settings page and manipulating the preset parameter. The injected scripts are stored and subsequently executed when administrators view the settings page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.