CVE-2021-24995: HTML5 Responsive Faq Project HTML5 Responsive Faq

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The HTML5 Responsive FAQ WordPress plugin through 2.8.5 does not properly sanitise and escape some of its settings, which could allow a high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

Affected products

• HTML5 Responsive Faq Project HTML5 Responsive Faq: before 2.8.5 (fixed in 2.8.5)

Published 2022-03-14. Last modified 2026-06-17.