CVE-2021-24305

🗓️ 24 May 2021 10:58:04Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 48 Views🌐 WEB

The Target First WordPress Plugin v2.0 critical unauthenticated stored XSS vulnerabilit

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress 跨站脚本漏洞	24 May 202100:00	–	cnnvd
CNVD	WordPress Storage XSS Vulnerability	9 Jul 202100:00	–	cnvd
Cvelist	CVE-2021-24305 Target First Plugin 2.0 - Unauthenticated Stored XSS via Licence Key	24 May 202110:58	–	cvelist
EUVD	EUVD-2021-11219	7 Oct 202500:30	–	euvd
NVD	CVE-2021-24305	24 May 202111:15	–	nvd
OSV	CVE-2021-24305	24 May 202111:15	–	osv
Prion	Cross site scripting	24 May 202111:15	–	prion
RedhatCVE	CVE-2021-24305	22 May 202519:21	–	redhatcve
wpexploit	Target First Plugin 2.0 - Unauthenticated Stored XSS via Licence Key	5 May 202100:00	–	wpexploit
WPVulnDB	Target First Plugin 2.0 - Unauthenticated Stored XSS via Licence Key	5 May 202100:00	–	wpvulndb

NVD

Vulners

Node

targetfirst watcheezyMatch2.0wordpress

[
  {
    "product": "Target First Plugin",
    "vendor": "TargetFirst",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      }
    ]
  }
]

Source	Link
targetfirst	www.targetfirst.com/
wpscan	www.wpscan.com/vulnerability/4d55d1f5-a7b8-4029-942d-7a13e2498f64

Parameter	Position	Path	Description	CWE
weeWzKey	request body	/	Unauthenticated stored XSS via POST parameter weeWzKey stored as weeID option; input not sanitized and echoed in page footer.	CWE-79

21 Nov 2024 05:52Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

CVSS 3.16.1

EPSS0.02316

CWE-79