Lucene search
PRIOn knowledge basePRION:CVE-2021-24697HistoryNov 08, 2021 - 6:15 p.m.
Cross site scripting
2021-11-0818:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
41.4%
The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the 1) sdm_active_tab GET parameter and 2) sdm_stats_start_date/sdm_stats_end_date POST parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
| CPE | Name | Operator | Version |
|---|---|---|---|
| simple_download_monitor | lt | 3.9.5 |
Related
patchstack
patchstack
cve
cve
CVE-2021-24697
2021-11-08 18:15:09
nvd
nvd
CVE-2021-24697
2021-11-08 18:15:09
cnvd
cnvd
WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-101465)
2021-11-10 00:00:00
cvelist
cvelist
wpvulndb
wpvulndb
Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting
2021-10-05 00:00:00
wpexploit
wpexploit
Simple Download Monitor < 3.9.5 - Reflected Cross-Site Scripting
2021-10-05 00:00:00