CVE-2021-47984

Name of the Vulnerable Software and Affected Versions WP24 Domain Check version 1.6.2

Description A stored cross-site scripting issue allows authenticated attackers to inject malicious scripts. This is achieved by submitting crafted input to the fieldnameDomain parameter through the plugin settings form at the 'options.php' endpoint. The injected JavaScript payloads execute in the browsers of administrators when they view the settings page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.