Lucene search
PRIOn knowledge basePRION:CVE-2021-24958HistoryMar 14, 2022 - 3:15 p.m.
Cross site scripting
2022-03-1415:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
24.8%
The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action, available to any authenticated user, and does not escape some of the settings. As a result, any authenticated user, such as subscriber could update the plugin’s settings and put Cross-Site Scripting payloads in them
| CPE | Name | Operator | Version |
|---|---|---|---|
| meks_easy_photo_feed_widget | lt | 1.2.4 |
Related
nvd
nvd
CVE-2021-24958
2022-03-14 15:15:08
cnvd
cnvd
WordPress Meks Easy Photo Feed Widget Cross-Site Scripting Vulnerability
2022-03-16 00:00:00
cvelist
cvelist
wpvulndb
wpvulndb
wpexploit
wpexploit
cve
cve
CVE-2021-24958
2022-03-14 15:15:08