Lucene search
PRIOn knowledge basePRION:CVE-2021-24433HistoryJan 16, 2024 - 4:15 p.m.
Cross site scripting
2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
5
vulnerability
wordpress
plugin
cross-site scripting
nvd
contributor role
The simple sort&search WordPress plugin through 0.0.3 does not make sure that the indexurl parameter of the shortcodes “category_sims”, “order_sims”, “orderby_sims”, “period_sims”, and “tag_sims” use allowed URL protocols, which can lead to stored cross-site scripting by users with a role as low as Contributor
| CPE | Name | Operator | Version |
|---|---|---|---|
| simple_sort\\&search | le | 0.0.3 |
Related
wpexploit
wpexploit
Simple Sort&Search <= 0.0.3 - Ccontributor+ Stored XSS
2021-06-21 00:00:00
wpvulndb
wpvulndb
Simple Sort&Search <= 0.0.3 - Ccontributor+ Stored XSS
2021-06-21 00:00:00
cvelist
cvelist
CVE-2021-24433 Simple Sort&Search <= 0.0.3 - Ccontributor+ Stored XSS
2024-01-16 15:49:30
nvd
nvd
CVE-2021-24433
2024-01-16 16:15:08
cve
cve
CVE-2021-24433
2024-01-16 16:15:08
patchstack
patchstack