Lucene search

K

MitreCVELIST:CVE-2021-3124

HistoryFeb 25, 2021 - 2:53 p.m.

CVE-2021-3124

2021-02-2514:53:23

mitre

www.cve.org

3

cross-site scripting

form field

remote attacker

code injection

EPSS

0.001

Percentile

46.6%

Stored cross-site scripting (XSS) in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars[0][name] field.

References

db.threatpress.com/vulnerability/custom-global-variables/wordpress-custom-global-variables-plugin-1-0-5-stored-cross-site-scripting-xss-vulnerability

www.exploit-db.com/exploits/49406

EPSS

0.001

Percentile

46.6%

Related for CVELIST:CVE-2021-3124

prion1 nvd1 cve1