Lucene search
K

CVE-2021-24941

πŸ—“οΈΒ 21 Dec 2021Β 08:45:37Reported byΒ WPScanTypeΒ 
cve
Β cve
πŸ”—Β web.nvd.nist.govπŸ‘Β 49Β Views🌐 WEB

The WordPress Plugin before 2.0.5 is vulnerable to reflected Cross-Site Scripting via the message_id parameter

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2021-24941
21 Dec 202112:23
–circl
CNNVD
WordPress ζ’δ»Άθ·¨η«™θ„šζœ¬ζΌζ΄ž
21 Dec 202100:00
–cnnvd
CNVD
WordPress icegram plugin cross-site scripting vulnerability (CNVD-2021-102791)
26 Dec 202100:00
–cnvd
Cvelist
CVE-2021-24941 Icegram < 2.0.5 - Reflected Cross-Site Scripting
21 Dec 202108:45
–cvelist
EUVD
EUVD-2021-11853
7 Oct 202500:30
–euvd
NVD
CVE-2021-24941
21 Dec 202109:15
–nvd
OSV
CVE-2021-24941
21 Dec 202109:15
–osv
Patchstack
WordPress Icegram plugin <= 2.0.4 - Reflected Cross-Site Scripting (XSS) vulnerability
22 Nov 202100:00
–patchstack
Prion
Cross site scripting
21 Dec 202109:15
–prion
RedhatCVE
CVE-2021-24941
22 May 202519:24
–redhatcve
Rows per page
NVD
Vulners
Node
icegramicegramRange<2.0.5wordpress
[
  {
    "product": "Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.0.5",
        "status": "affected",
        "version": "2.0.5",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
message_idrequest body/wp-admin/admin-ajax.phpReflected XSS: message_id is not sanitized/escaped before output in an attribute in the get_message_action_row AJAX responseCWE-79

Data

Build on a solid foundation withΒ Vulners data

WeΒ provide theΒ essential building blocks forΒ cybersecurity solutions withΒ comprehensive, structured, andΒ constantly updated vulnerability andΒ exploits data

Api

Power your application withΒ Vulners API

The Vulners REST API offers reliable, high-performance access toΒ vulnerabilityΒ intelligence, withΒ 99.9%Β SLAΒ uptime andΒ CDN-backed data delivery forΒ seamlessΒ global access

App

Assess and manage vulnerabilities withΒ VulnersΒ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:54Current
6Medium risk
Vulners AI Score6
CVSS 24.3
CVSS 3.16.1
EPSS0.0021
49