Lucene search
PRIOn knowledge basePRION:CVE-2021-24604HistorySep 20, 2021 - 10:15 a.m.
Cross site scripting
2021-09-2010:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
24.8%
The Availability Calendar WordPress plugin before 1.2.2 does not sanitise or escape its Category Names before outputting them in page/post where the associated shortcode is embed, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
| CPE | Name | Operator | Version |
|---|---|---|---|
| availability_calendar | lt | 1.2.2 |
Related
nvd
nvd
CVE-2021-24604
2021-09-20 10:15:08
wpvulndb
wpvulndb
Availability Calendar < 1.2.2 - Authenticated Stored Cross-Site Scripting
2021-08-03 00:00:00
wpexploit
wpexploit
Availability Calendar < 1.2.2 - Authenticated Stored Cross-Site Scripting
2021-08-03 00:00:00
cvelist
cvelist
cve
cve
CVE-2021-24604
2021-09-20 10:15:08