CVE-2021-24350: Bestwebsoft Visitors Online

Medium severity, CVSS 6.1. EPSS: 1.3% chance of exploitation in the next 30 days.

The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel.

Affected products

• Bestwebsoft Visitors Online: up to and including 0.3

Published 2021-06-14. Last modified 2026-06-17.