CVE-2021-34655

🗓️ 16 Aug 2021 18:22:36Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 104 Views🌐 WEB

The WP Songbook WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the url paramete

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-34655	23 May 202520:48	–	circl
CNNVD	WordPress 插件跨站脚本漏洞	16 Aug 202100:00	–	cnnvd
Cvelist	CVE-2021-34655 WP Songbook <= 2.0.11 Reflected Cross-Site Scripting	16 Aug 202118:22	–	cvelist
EUVD	EUVD-2021-21305	7 Oct 202500:30	–	euvd
NVD	CVE-2021-34655	16 Aug 202119:15	–	nvd
OSV	CVE-2021-34655	16 Aug 202119:15	–	osv
Patchstack	WordPress WP Songbook <= 2.0.11 - Reflected Cross-Site Scripting (XSS) vulnerability	13 Aug 202100:00	–	patchstack
Prion	Cross site scripting	16 Aug 202119:15	–	prion
Vulnrichment	CVE-2021-34655 WP Songbook <= 2.0.11 Reflected Cross-Site Scripting	16 Aug 202118:22	–	vulnrichment
WPVulnDB	WP Songbook <= 2.0.11 - Reflected Cross-Site Scripting	13 Aug 202100:00	–	wpvulndb

NVD

Vulners

Node

wp_songbook_project wp_songbookRange≤2.0.11wordpress

[
  {
    "product": "WP Songbook",
    "vendor": "WP Songbook",
    "versions": [
      {
        "lessThanOrEqual": "2.0.11",
        "status": "affected",
        "version": "2.0.11",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/wp-songbook/tags/2.0.11/inc/class.ajax.php
wordfence	www.wordfence.com/vulnerability-advisories/

Parameter	Position	Path	Description	CWE
url	query param	inc/class.ajax.php	Reflected XSS via the url parameter in WP Songbook plugin (inc/class.ajax.php) up to version 2.0.11	CWE-79

21 Nov 2024 06:10Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.16.1

EPSS0.0021

SSVC

CWE-79