Lucene search
PRIOn knowledge basePRION:CVE-2021-24902HistoryDec 27, 2021 - 11:15 a.m.
Cross site scripting
2021-12-2711:15:00
PRIOn knowledge base
www.prio-n.com
7
0.001 Low
EPSS
Percentile
24.8%
The Typebot | Build beautiful conversational forms WordPress plugin before 1.4.3 does not sanitise and escape the Publish ID setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Related
nvd
nvd
CVE-2021-24902
2021-12-27 11:15:08
cve
cve
CVE-2021-24902
2021-12-27 11:15:08
cvelist
cvelist
CVE-2021-24902 Typebot < 1.4.3 - Admin+ Stored Cross Site Scripting
2021-12-27 10:33:20
wpexploit
wpexploit
Typebot < 1.4.3 - Admin+ Stored Cross Site Scripting
2021-11-29 00:00:00
wpvulndb
wpvulndb
Typebot < 1.4.3 - Admin+ Stored Cross Site Scripting
2021-11-29 00:00:00
patchstack
patchstack