Lucene search
+L

CVE-2021-24409

🗓️ 12 Jul 2021 19:20:52Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 111 Views🌐 WEB

The Prismatic WordPress plugin before 2.8 is vulnerable to reflected Cross-Site Scripting (XSS) via the 'tab' GET parameter

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2021-24409
12 Jul 202120:15
attackerkb
cnnvd
CNNVD
WordPress 插件跨站脚本漏洞
12 Jul 202100:00
cnnvd
cnvd
CNVD
WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-59594)
14 Jul 202100:00
cnvd
cvelist
Cvelist
CVE-2021-24409 Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)
12 Jul 202119:20
cvelist
nuclei
Nuclei
Prismatic < 2.8 - Cross-Site Scripting
29 Aug 202610:07
nuclei
nvd
NVD
CVE-2021-24409
12 Jul 202120:15
nvd
osv
OSV
CVE-2021-24409
12 Jul 202120:15
osv
patchstack
Patchstack
WordPress Prismatic plugin <= 2.7 - Reflected Cross-Site Scripting (XSS) vulnerability
21 Jun 202100:00
patchstack
prion
Prion
Cross site scripting
12 Jul 202120:15
prion
redhatcve
RedhatCVE
CVE-2021-24409
22 May 202518:24
redhatcve
Rows per page
NVD
Node
plugin-planetprismaticRange<2.8wordpress
[
  {
    "product": "Prismatic",
    "vendor": "Jeff Starr",
    "versions": [
      {
        "lessThan": "2.8",
        "status": "affected",
        "version": "2.8",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
tabquery param/wp-admin/options-general.php?page=prismatic&tab=%22+style%3Danimation-name%3Arotation+onanimationend%3Dalert%28origin%29%2F%2F%22Reflected XSS in tab parameter in Prismatic WordPress plugin affects administrator contextCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:39Current
6Medium risk
Vulners AI Score6
CVSS 24.3
CVSS 3.16.1
EPSS0.01793
111