Lucene search
PRIOn knowledge basePRION:CVE-2021-24870HistoryJan 16, 2024 - 4:15 p.m.
Cross site scripting
2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
7
wordpress
csrf
ajax
cross-site scripting
nvd
The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_fastest_cache | lt | 0.9.5 |
Related
cve
cve
CVE-2021-24870
2024-01-16 16:15:09
cvelist
cvelist
wpvulndb
wpvulndb
WP Fastest Cache < 0.9.5 - CSRF to Stored Cross-Site Scripting
2021-10-14 00:00:00
nvd
nvd
CVE-2021-24870
2024-01-16 16:15:09
openvas
openvas
WordPress WP Fastest Cache Plugin < 0.9.5 Multiple Vulnerabilities
2021-11-03 00:00:00