Lucene search
+L

CVE-2021-24792

🗓️ 13 Dec 2021 11:15:08Reported by [email protected]Type 
nvd
 nvd
🔗 web.nvd.nist.gov👁 8 Views

The Shiny Buttons WordPress plugin lacks authorization and CSRF protection, allowing unauthenticated users to insert malicious templates and trigger Stored Cross-Site Scripting vulnerabilities

Related
Detection
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2021-24792
13 Dec 202111:15
attackerkb
Circl
CVE-2021-24792
13 Dec 202114:24
circl
CNNVD
WordPress 插件跨站脚本漏洞
13 Dec 202100:00
cnnvd
CNVD
WordPress Shiny Buttons plugin cross-site scripting vulnerability
18 Dec 202100:00
cnvd
CVE
CVE-2021-24792
13 Dec 202110:40
cve
Cvelist
CVE-2021-24792 Shiny Buttons <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
13 Dec 202110:40
cvelist
OSV
CVE-2021-24792
13 Dec 202111:15
osv
Patchstack
WordPress Shiny Buttons plugin <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability
15 Nov 202100:00
patchstack
Prion
Cross site scripting
13 Dec 202111:15
prion
RedhatCVE
CVE-2021-24792
22 May 202518:24
redhatcve
Rows per page
NVD
Node
wpedenshiny_buttonsRange1.1.0wordpress

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation