Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-24904
HistoryFeb 14, 2022 - 12:15 p.m.

CVE-2021-24904

2022-02-1412:15:14
CWE-79
[email protected]
web.nvd.nist.gov
2
mortgage calculators wp
plugin
stored cross-site scripting

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

38.3%

JSON

The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Affected configurations

Nvd
Node
lenderdmortgage_calculators_wpRange<1.56wordpress
VendorProductVersionCPE
lenderdmortgage_calculators_wp*cpe:2.3:a:lenderd:mortgage_calculators_wp:*:*:*:*:*:wordpress:*:*

Related

wpvulndb 1
prion 1
zdt 1
cnvd 1
wpexploit 1
cvelist 1
patchstack 1
packetstorm 1
cve 1
exploitdb 1
wpvulndb
wpvulndb
Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting
2022-01-11 00:00:00
prion
prion
Cross site scripting
2022-02-14 12:15:00
zdt
zdt
WordPress Mortgage Calculators WP 1.52 Plugin - Stored Cross-Site Scripting Vulnerability
2022-01-27 00:00:00
cnvd
cnvd
WordPress Mortgage Calculators WP Cross-Site Scripting Vulnerability
2022-03-08 00:00:00
wpexploit
wpexploit
Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting
2022-01-11 00:00:00
cvelist
cvelist
CVE-2021-24904 Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting
2022-02-14 09:20:37
patchstack
patchstack
WordPress Mortgage Calculators WP plugin <= 1.55 - Stored Cross-Site Scripting (XSS) vulnerability
2022-01-11 00:00:00
packetstorm
packetstorm
WordPress Mortgage Calculators WP 1.52 Cross Site Scripting
2022-01-27 00:00:00
cve
cve
CVE-2021-24904
2022-02-14 12:15:14
exploitdb
exploitdb
WordPress Plugin Mortgage Calculators WP 1.52 - Stored Cross-Site Scripting (XSS) (Authenticated)
2022-01-27 00:00:00

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

CVSS3

4.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

38.3%

JSON
Related for NVD:CVE-2021-24904
wpvulndb1prion1zdt1cnvd1wpexploit1cvelist1patchstack1packetstorm1cve1exploitdb1