CVE-2021-24646

🗓️ 08 Nov 2021 18:08:15Reported by WPScanType

The Booking.com Banner Creator plugin before 1.4.3 allows XSS attacks

Reporter	Title	Published	Views	Family All 7
WPVulnDB	Booking.com Banner Creator < 1.4.3 - Admin+ Stored Cross-Site Scripting	5 Oct 202100:00	–	wpvulndb
NVD	CVE-2021-24646	8 Nov 202118:15	–	nvd
Patchstack	WordPress Booking.com Banner Creator plugin <= 1.4.2 - Stored Cross-Site Scripting (XSS) vulnerability	5 Oct 202100:00	–	patchstack
CNVD	WordPress Booking.com Banner Creator Plugin Cross-Site Scripting Vulnerability	10 Nov 202100:00	–	cnvd
Prion	Cross site scripting	8 Nov 202118:15	–	prion
Cvelist	CVE-2021-24646 Booking.com Banner Creator < 1.4.3 - Admin+ Stored Cross-Site Scripting	8 Nov 202117:34	–	cvelist
wpexploit	Booking.com Banner Creator < 1.4.3 - Admin+ Stored Cross-Site Scripting	5 Oct 202100:00	–	wpexploit

Nvd

Vulners

Node

bookingholdings booking.com_banner_creatorRange<1.4.3wordpress

[
  {
    "product": "Booking.com Banner Creator",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "1.4.3",
        "status": "affected",
        "version": "1.4.3",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/36aae14e-4bdf-4da6-a0f9-d71935105d45

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Nov 2021 18:15Current

4.7Medium risk

Vulners AI Score4.7

CVSS23.5

CVSS34.8

EPSS0.001

CWE-79