Lucene search
PRIOn knowledge basePRION:CVE-2021-24428HistoryAug 02, 2021 - 11:15 a.m.
Cross site scripting
2021-08-0211:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
22.9%
The RSS for Yandex Turbo WordPress plugin through 1.30 does not sanitise or escape some of its settings before saving and outputing them in the admin dashboard, leading to an Authenticated Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yandex_turbo | le | 1.30 |
Related
wpvulndb
wpvulndb
RSS for Yandex Turbo <= 1.30 - Authenticated Stored XSS
2021-06-15 00:00:00
wpexploit
wpexploit
RSS for Yandex Turbo <= 1.30 - Authenticated Stored XSS
2021-06-15 00:00:00
cvelist
cvelist
CVE-2021-24428 RSS for Yandex Turbo <= 1.30 - Authenticated Stored XSS
2021-08-02 10:31:55
nvd
nvd
CVE-2021-24428
2021-08-02 11:15:08
cve
cve
CVE-2021-24428
2021-08-02 11:15:08