CVE-2021-39325

🗓️ 20 Sep 2021 19:59:22Reported by WordfenceType

The OptinMonster WordPress plugin has a Reflected XSS vulnerability in load_previews function up to version 2.6.0

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-39325	21 Sep 202100:27	–	circl
CNNVD	WordPress 插件跨站脚本漏洞	20 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-39325 OptinMonster <= 2.6.0 Reflected Cross-Site Scripting	20 Sep 202119:59	–	cvelist
EUVD	EUVD-2021-25686	7 Oct 202500:30	–	euvd
NVD	CVE-2021-39325	20 Sep 202120:15	–	nvd
OpenVAS	WordPress OptinMonster Plugin < 2.6.1 XSS Vulnerability	12 Oct 202100:00	–	openvas
OSV	CVE-2021-39325	20 Sep 202120:15	–	osv
Patchstack	WordPress OptinMonster plugin <= 2.6.0 - Reflected Cross-Site Scripting (XSS) vulnerability	20 Sep 202100:00	–	patchstack
Prion	Cross site scripting	20 Sep 202120:15	–	prion
Vulnrichment	CVE-2021-39325 OptinMonster <= 2.6.0 Reflected Cross-Site Scripting	20 Sep 202119:59	–	vulnrichment

NVD

Vulners

Node

optinmonster optinmonsterRange≤2.6.0wordpress

[
  {
    "product": "OptinMonster",
    "vendor": "OptinMonster",
    "versions": [
      {
        "lessThanOrEqual": "2.6.0",
        "status": "affected",
        "version": "2.6.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset
wordfence	www.wordfence.com/vulnerability-advisories/

21 Nov 2024 06:19Current

6.1Medium risk

Vulners AI Score6.1

CVSS 24.3

CVSS 3.16.1

EPSS0.00186

SSVC

CWE-79