Lucene search
+L

CVE-2021-24409

🗓️ 12 Jul 2021 19:20:52Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 99 Views🌐 WEB

The Prismatic WordPress plugin before 2.8 is vulnerable to reflected Cross-Site Scripting (XSS) via the 'tab' GET parameter

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2021-24409
12 Jul 202120:15
attackerkb
cnnvd
CNNVD
WordPress 插件跨站脚本漏洞
12 Jul 202100:00
cnnvd
cnvd
CNVD
WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-59594)
14 Jul 202100:00
cnvd
cvelist
Cvelist
CVE-2021-24409 Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)
12 Jul 202119:20
cvelist
nuclei
Nuclei
Prismatic < 2.8 - Cross-Site Scripting
9 Aug 202602:40
nuclei
nvd
NVD
CVE-2021-24409
12 Jul 202120:15
nvd
osv
OSV
CVE-2021-24409
12 Jul 202120:15
osv
patchstack
Patchstack
WordPress Prismatic plugin <= 2.7 - Reflected Cross-Site Scripting (XSS) vulnerability
21 Jun 202100:00
patchstack
prion
Prion
Cross site scripting
12 Jul 202120:15
prion
redhatcve
RedhatCVE
CVE-2021-24409
22 May 202518:24
redhatcve
Rows per page
NVD
Vulners
Node
plugin-planetprismaticRange<2.8wordpress
[
  {
    "product": "Prismatic",
    "vendor": "Jeff Starr",
    "versions": [
      {
        "lessThan": "2.8",
        "status": "affected",
        "version": "2.8",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
tabquery paramwp-admin/options-general.php?page=prismatic&tab=%22+style%3Danimation-name%3Arotation+onanimationend%3Dalert%28origin%29%2F%2F%22Reflected XSS via unsanitized 'tab' GET parameter echoed in an HTML attribute.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:39Current
6Medium risk
Vulners AI Score6
CVSS 24.3
CVSS 3.16.1
EPSS0.01793
99