Lucene search
PRIOn knowledge basePRION:CVE-2021-24177HistoryApr 05, 2021 - 7:15 p.m.
Default configuration
2021-04-0519:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
26.6%
In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manager_properties when a payload is submitted on the User-Agent parameter. The payload is then reflected back on the web application response.
| CPE | Name | Operator | Version |
|---|---|---|---|
| file_manager | lt | 7.1 |
Related
wpvulndb
wpvulndb
WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)
2021-02-26 00:00:00
nvd
nvd
CVE-2021-24177
2021-04-05 19:15:16
CVE-2021-27802
2021-04-29 16:15:09
cvelist
cvelist
CVE-2021-24177 WP File Manager < 7.1 - Reflected Cross-Site Scripting (XSS)
2021-04-05 18:27:45
cve
cve
CVE-2021-24177
2021-04-05 19:15:16
CVE-2021-27802
2021-04-29 16:15:09