Lucene search
PRIOn knowledge basePRION:CVE-2021-24622HistoryOct 18, 2021 - 2:15 p.m.
Cross site scripting
2021-10-1814:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
24.9%
The Customer Service Software & Support Ticket System WordPress plugin before 5.10.4 does not sanitize or escape form fields before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| customer_service_software_\\&_support_ticket_system | lt | 5.10.4 |
Related
patchstack
patchstack
cvelist
cvelist
CVE-2021-24622 WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting
2021-10-18 13:45:50
wpvulndb
wpvulndb
WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting
2021-09-20 00:00:00
cve
cve
CVE-2021-24622
2021-10-18 14:15:09
nvd
nvd
CVE-2021-24622
2021-10-18 14:15:09
wpexploit
wpexploit
WP Ticket < 5.10.4 - Admin+ Stored Cross-Site Scripting
2021-09-20 00:00:00