Lucene search

CVE-2021-24196

🗓️ 05 Apr 2021 19:16:15Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 23 Views🌐 WEB

The Social Slider Widget WordPress plugin before 1.8.5 allows Authenticated Reflected XSS in the plugin settings page

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2021-24196 Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)	5 Apr 202118:27	–	cvelist
Prion	Cross site scripting	5 Apr 202119:15	–	prion
WPVulnDB	Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)	14 Mar 202100:00	–	wpvulndb
NVD	CVE-2021-24196	5 Apr 202119:15	–	nvd
Patchstack	WordPress Social Slider Feed plugin <= 1.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability	15 Mar 202100:00	–	patchstack
wpexploit	Social Slider Widget < 1.8.5 - Authenticated Reflected Cross-Site Scripting (XSS)	14 Mar 202100:00	–	wpexploit

Nvd

Vulners

Node

cm-wp social_slider_widgetRange<1.8.5wordpress

[
  {
    "product": "Social Slider Widget",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.8.5",
        "status": "affected",
        "version": "1.8.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/bb20d732-a5e4-4140-ab51-b2aa1a53db12
purinechu	www.purinechu.github.io/posts/social_slider_widget_reflected_xss/

Parameter	Position	Path	Description	CWE
token_error	query param	/wp-admin/admin.php?page=settings-wisw	The 'token_error' parameter is controlled by users and can lead to reflected XSS due to lack of sanitization.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Apr 2021 19:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS23.5

CVSS35.4

EPSS0.00205

CWE-79