CVE-2021-24597: You-Shang Project You-Shang

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

The You Shang WordPress plugin through 1.0.1 does not escape its qrcode links settings, which result into Stored Cross-Site Scripting issues in frontend posts and the plugins settings page depending on the payload used

Affected products

• You-Shang Project You-Shang: up to and including 1.0.1

Published 2021-09-20. Last modified 2026-06-17.