CVE-2021-24534 PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS

2021-08-1610:48:28

CWE-79

WPScan

raw.githubusercontent.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.1%

JSON

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its “php_id” setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue.