Lucene search
WPScanCVELIST:CVE-2021-25044HistoryOct 10, 2022 - 12:00 a.m.
CVE-2021-25044 Cryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site Scripting
2022-10-1000:00:00
CWE-79
WPScan
www.cve.org
4
cve-2021-25044
cryptocurrency pricing
reflected cross-site scripting
EPSS
0.001
Percentile
40.2%
The Cryptocurrency Pricing list and Ticker WordPress plugin through 1.5 does not sanitise and escape the ccpw_setpage parameter before outputting it back in pages where its shortcode is embed, leading to a Reflected Cross-Site Scripting issue
CNA Affected
[
{
"vendor": "Unknown",
"product": "Cryptocurrency Pricing list and Ticker",
"versions": [
{
"version": "1.5",
"status": "affected",
"lessThanOrEqual": "1.5",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-25044
2022-10-10 21:15:09
cve
cve
CVE-2021-25044
2022-10-10 21:15:09
cnvd
cnvd
prion
prion
Cross site scripting
2022-10-10 21:15:00
patchstack
patchstack