Lucene search
PRIOn knowledge basePRION:CVE-2021-24971HistoryFeb 28, 2022 - 9:15 a.m.
Cross site scripting
2022-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
24.8%
The WP Responsive Menu WordPress plugin before 3.1.7.1 does not have capability and CSRF checks in the wpr_live_update AJAX action, as well as do not sanitise and escape some of the data submitted. As a result, any authenticated, such as subscriber could update the plugin’s settings and perform Cross-Site Scripting attacks against all visitor and users on the frontend
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_responsive_menu | lt | 3.1.7.1 |
Related
wpvulndb
wpvulndb
WP Responsive Menu < 3.1.7.1 - Subscriber+ Settings Update to Stored XSS
2022-01-26 00:00:00
cnvd
cnvd
WordPress WP Responsive Menu plugin cross-site scripting vulnerability
2022-03-02 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2021-24971
2022-02-28 09:15:08
cve
cve
CVE-2021-24971
2022-02-28 09:15:08
patchstack
patchstack
wpexploit
wpexploit
WP Responsive Menu < 3.1.7.1 - Subscriber+ Settings Update to Stored XSS
2022-01-26 00:00:00