CVE-2021-24338 Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)

2021-06-2119:18:12

CWE-79

WPScan

www.cve.org

wordpress

cross-site scripting

authenticated.

EPSS

0.001

Percentile

24.8%

JSON

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the ‘Singular Label’ field parameter.

CNA Affected

[
  {
    "product": "Pods – Custom Content Types and Fields",
    "vendor": "Pods Framework Team",
    "versions": [
      {
        "lessThan": "2.4.4.1*",
        "status": "affected",
        "version": "2.4.4.1",
        "versionType": "custom"
      },
      {
        "lessThan": "2.7.27",
        "status": "affected",
        "version": "2.7.27",
        "versionType": "custom"
      }
    ]
  }
]