CVE-2021-24476 Steam Group Viewer <= 2.1 - Authenticated Stored Cross-Site Scripting (XSS)

2021-08-0210:32:16

CWE-79

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

24.9%

JSON

The Steam Group Viewer WordPress plugin through 2.1 does not sanitise or escape its “Steam Group Address” settings before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue

CNA Affected

[
  {
    "product": "Steam Group Viewer",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "2.1",
        "status": "affected",
        "version": "2.1",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/d1885641-9547-4dd5-84be-ba4a160ee1f5

0.001 Low

EPSS

Percentile

24.9%

JSON

Related for CVELIST:CVE-2021-24476