CVE-2021-24607: Wooassist StoreFront Footer Text

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed.

Affected products

• Wooassist StoreFront Footer Text: up to and including 1.0.1

Published 2021-11-08. Last modified 2026-06-17.