Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2021-24654
HistoryOct 04, 2021 - 12:15 p.m.

Cross site scripting

2021-10-0412:15:00
PRIOn knowledge base
www.prio-n.com
1

0.001 Low

EPSS

Percentile

25.0%

JSON

The User Registration WordPress plugin before 2.0.2 does not properly sanitise the user_registration_profile_pic_url value when submitted directly via the user_registration_update_profile_details AJAX action. This could allow any authenticated user, such as subscriber, to perform Stored Cross-Site attacks when their profile is viewed

CPENameOperatorVersion
user_registrationlt2.0.2

Related

nvd 1
wpexploit 2
wpvulndb 2
cve 1
patchstack 1
cvelist 1
nvd
nvd
CVE-2021-24654
2021-10-04 12:15:08
wpexploit
wpexploit
WP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise
2021-09-22 00:00:00
User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
2021-09-06 00:00:00
wpvulndb
wpvulndb
User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
2021-09-06 00:00:00
WP User Manager < 2.6.3 - Arbitrary User Password Reset to Account Compromise
2021-09-22 00:00:00
cve
cve
CVE-2021-24654
2021-10-04 12:15:08
patchstack
patchstack
WordPress User Registration plugin <= 2.0.1 - Stored Cross-Site Scripting (XSS) vulnerability
2021-09-06 00:00:00
cvelist
cvelist
CVE-2021-24654 User Registration < 2.0.2 - Low Privilege Stored Cross-Site Scripting
2021-10-04 11:20:17

0.001 Low

EPSS

Percentile

25.0%

JSON
Related for PRION:CVE-2021-24654
nvd1wpexploit2wpvulndb2cve1patchstack1cvelist1