Lucene search
PRIOn knowledge basePRION:CVE-2021-24346HistoryJun 14, 2021 - 2:15 p.m.
Cross site scripting
2021-06-1414:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
22.0%
The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue
| CPE | Name | Operator | Version |
|---|---|---|---|
| stock_in_\\&_out | le | 1.0.4 |
Related
wpvulndb
wpvulndb
Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting (XSS)
2021-05-27 00:00:00
nvd
nvd
CVE-2021-24346
2021-06-14 14:15:08
cvelist
cvelist
wpexploit
wpexploit
Stock in & out <= 1.0.4 - Reflected Cross-Site Scripting (XSS)
2021-05-27 00:00:00
cve
cve
CVE-2021-24346
2021-06-14 14:15:08
patchstack
patchstack