CVE-2021-38354

🗓️ 10 Sep 2021 13:34:42Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 38 Views🌐 WEB

The GNU-Mailman Integration WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the gm_error parameter. (CVE-2021-38354

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-38354	10 Sep 202118:30	–	circl
CNNVD	WordPress 插件跨站脚本漏洞	10 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-38354 GNU-Mailman Integration <= 1.0.6 Reflected Cross-Site Scripting	10 Sep 202113:34	–	cvelist
EUVD	EUVD-2021-24807	7 Oct 202500:30	–	euvd
NVD	CVE-2021-38354	10 Sep 202114:15	–	nvd
OSV	CVE-2021-38354	10 Sep 202114:15	–	osv
Patchstack	WordPress GNU-Mailman Integration plugin <= 1.0.6 - Reflected Cross-Site Scripting (XSS) vulnerability	9 Sep 202100:00	–	patchstack
Prion	Cross site scripting	10 Sep 202114:15	–	prion
Vulnrichment	CVE-2021-38354 GNU-Mailman Integration <= 1.0.6 Reflected Cross-Site Scripting	10 Sep 202113:34	–	vulnrichment
WPVulnDB	GNU-Mailman Integration <= 1.0.6 - Reflected Cross-Site Scripting	9 Sep 202100:00	–	wpvulndb

NVD

Vulners

Node

gnu-mailman_integration_project gnu-mailman_integrationRange≤1.0.6wordpress

[
  {
    "product": "GNU-Mailman Integration",
    "vendor": "GNU-Mailman Integration",
    "versions": [
      {
        "lessThanOrEqual": "1.0.6",
        "status": "affected",
        "version": "1.0.6",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/gnu-mailman-integration/trunk/includes/admin/mailing-lists-page.php
wordfence	www.wordfence.com/vulnerability-advisories/

Parameter	Position	Path	Description	CWE
gm_error	query param	includes/admin/mailing-lists-page.php	Reflected XSS via gm_error parameter in the mailing-lists-page.php endpoint.	CWE-79

21 Nov 2024 06:16Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.16.1

EPSS0.0021

SSVC

CWE-79