Lucene search
WPScanCVELIST:CVE-2021-24888HistoryNov 23, 2021 - 7:16 p.m.
CVE-2021-24888 ImageBoss < 3.0.6 - Admin+ Stored Cross-Site Scripting
2021-11-2319:16:20
CWE-79
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
24.8%
The ImageBoss WordPress plugin before 3.0.6 does not sanitise and escape its Source Name setting, which could allow high privilege users to perform Cross-Site Scripting attacks
CNA Affected
[
{
"product": "ImageBoss – Images Up To 60% Smaller & CDN",
"vendor": "Unknown",
"versions": [
{
"lessThan": "3.0.6",
"status": "affected",
"version": "3.0.6",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2021-24888
2021-11-23 20:15:10
osv
osv
CVE-2021-24888
2021-11-23 20:15:10
patchstack
patchstack
prion
prion
Cross site scripting
2021-11-23 20:15:00
nvd
nvd
CVE-2021-24888
2021-11-23 20:15:10