CVE-2021-24287

🗓️ 14 May 2021 11:38:18Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 96 Views🌐 WEB

The Select All Categories and Taxonomies WordPress plugin before 1.3.2 is prone to a reflected cross-site scripting issue due to improper sanitization

Reporter	Title	Published	Views	Family All 13
0day.today	WordPress Select All Categories and Taxonomies 1.3.1 Plugin - Reflected Cross-Site Scripting	29 Sep 202100:00	–	zdt
CNNVD	WordPress plugin 跨站脚本漏洞	14 May 202100:00	–	cnnvd
CNVD	WordPress plugin cross-site scripting vulnerability	20 May 202100:00	–	cnvd
Cvelist	CVE-2021-24287 Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)	14 May 202111:38	–	cvelist
Exploit DB	WordPress Plugin Select All Categories and Taxonomies 1.3.1 - Reflected Cross-Site Scripting (XSS)	29 Sep 202100:00	–	exploitdb
Nuclei	WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting	7 Jun 202603:02	–	nuclei
NVD	CVE-2021-24287	14 May 202112:15	–	nvd
Packet Storm	WordPress Select All Categories And Taxonomies 1.3.1 Cross Site Scripting	29 Sep 202100:00	–	packetstorm
Patchstack	WordPress Select All Categories and Taxonomies, Change Checkbox to Radio Buttons plugin <= 1.3.1 - Reflected Cross-Site Scripting (XSS) vulnerability	23 Apr 202100:00	–	patchstack
Prion	Cross site scripting	14 May 202112:15	–	prion

NVD

Vulners

Node

mooveagency select_all_categories_and_taxonomies,_change_checkbox_to_radio_buttonsRange<1.3.2wordpress

[
  {
    "product": "Select All Categories and Taxonomies, Change Checkbox to Radio Buttons",
    "vendor": "Moove Agency",
    "versions": [
      {
        "lessThan": "1.3.2",
        "status": "affected",
        "version": "1.3.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/164327/WordPress-Select-All-Categories-And-Taxonomies-1.3.1-Cross-Site-Scripting.html
wpscan	www.wpscan.com/vulnerability/56e1bb56-bfc5-40dd-b2d0-edef43d89bdf

Parameter	Position	Path	Description	CWE
tab	query param	/wp-admin/options-general.php?page=moove-taxonomy-settings&tab=" onMouseOver="alert(1);	Reflected XSS via unsanitized tab parameter on settings page	CWE-79
tab	query param	/wp-admin/options-general.php?page=moove-taxonomy-settings&tab="+style%3D"animation-name%3Aspinner"+onanimationstart%3D"alert(%2FXSS%2F)	Reflected XSS via unsanitized tab parameter on settings page	CWE-79

21 Nov 2024 05:52Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.16.1

EPSS0.2234

CWE-79