Lucene search
WPScanCVELIST:CVE-2021-24277HistoryMay 14, 2021 - 11:38 a.m.
CVE-2021-24277 RSS for Yandex Turbo < 1.30 - Authenticated Stored Cross-Site Scripting (XSS)
2021-05-1411:38:16
CWE-79
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
24.9%
The RSS for Yandex Turbo WordPress plugin before 1.30 did not properly sanitise the user inputs from its Счетчики settings tab before outputting them back in the page, leading to authenticated stored Cross-Site Scripting issues
CNA Affected
[
{
"product": "RSS for Yandex Turbo",
"vendor": "Flector",
"versions": [
{
"lessThan": "1.30",
"status": "affected",
"version": "1.30",
"versionType": "custom"
}
]
}
]Related
wpvulndb
wpvulndb
prion
prion
Cross site scripting
2021-05-14 12:15:00
nvd
nvd
CVE-2021-24277
2021-05-14 12:15:08
cve
cve
CVE-2021-24277
2021-05-14 12:15:08
wpexploit
wpexploit