Lucene search
John Castro (Pagely)PATCHSTACK:2B4CD1A19D238BAEBC72049472A2FFFEHistoryOct 07, 2021 - 12:00 a.m.
WordPress Comment Engine Pro plugin <= 1.0 - Stored Cross-Site Scripting (XSS) vulnerability
2021-10-0700:00:00
John Castro (Pagely)
patchstack.com
5
wordpress
comment engine pro
cross-site scripting
xss
vulnerability
john castro
pagely
EPSS
0.001
Percentile
19.4%
Stored Cross-Site Scripting (XSS) vulnerability discovered by John Castro (Pagely) in WordPress Comment Engine Pro plugin (versions <= 1.0).
Solution
Deactivate and delete. This plugin has been closed as of October 7, 2021 and is not available for download. Reason: Security Issue.
Related
nvd
nvd
CVE-2021-36911
2021-12-10 17:15:07
cve
cve
CVE-2021-36911
2021-12-10 17:15:07
cvelist
cvelist
prion
prion
Cross site scripting
2021-12-10 17:15:00
wpvulndb
wpvulndb
Comment Engine Pro <= 1.0 - Editor+ Stored Cross-Site Scripting
2021-12-13 00:00:00