CVE-2021-24339

🗓️ 21 Jun 2021 19:18:13Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 57 Views

The Pods WordPress plugin before 2.7.27 is vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress 跨站脚本漏洞	21 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-24339 Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)	21 Jun 202119:18	–	cvelist
EUVD	EUVD-2021-11252	7 Oct 202500:30	–	euvd
NVD	CVE-2021-24339	21 Jun 202120:15	–	nvd
OpenVAS	WordPress Pods Plugin < 2.7.27 Multiple Vulnerabilities	24 Jun 202200:00	–	openvas
OSV	CVE-2021-24339	21 Jun 202120:15	–	osv
Patchstack	WordPress Pods plugin <= 2.7.26 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	27 Apr 202100:00	–	patchstack
Prion	Cross site scripting	21 Jun 202120:15	–	prion
RedhatCVE	CVE-2021-24339	22 May 202518:34	–	redhatcve
WPVulnDB	Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)	15 Jan 202100:00	–	wpvulndb

NVD

Vulners

Node

podsfoundation podsRange<2.7.27wordpress

[
  {
    "product": "Pods – Custom Content Types and Fields",
    "vendor": "Pods Framework Team",
    "versions": [
      {
        "lessThan": "2.4.4.1*",
        "status": "affected",
        "version": "2.4.4.1",
        "versionType": "custom"
      },
      {
        "lessThan": "2.7.27",
        "status": "affected",
        "version": "2.7.27",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/8e72236d-f620-4503-a324-dcf49405351b
whitesourcesoftware	www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24339

21 Nov 2024 05:52Current

5.3Medium risk

Vulners AI Score5.3

CVSS 23.5

CVSS 3.15.4

EPSS0.00602

CWE-79