Lucene search
PRIOn knowledge basePRION:CVE-2021-24977HistoryFeb 28, 2022 - 9:15 a.m.
Cross site scripting
2022-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
0.001 Low
EPSS
Percentile
41.2%
The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the frontend for all users. Due to the lack of sanitisation and escaping in the backend, it could also lead to Stored XSS issues
| CPE | Name | Operator | Version |
|---|---|---|---|
| use_any_font | lt | 6.2.1 |
Related
patchstack
patchstack
nvd
nvd
CVE-2021-24977
2022-02-28 09:15:08
cve
cve
CVE-2021-24977
2022-02-28 09:15:08
wpexploit
wpexploit
Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending
2022-01-31 00:00:00
openvas
openvas
WordPress Use Any Font Plugin < 6.2.1 CSS Vulnerability
2022-03-14 00:00:00
cvelist
cvelist
wpvulndb
wpvulndb
Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending
2022-01-31 00:00:00
cnvd
cnvd
WordPress Custom Font Uploader plugin跨站脚本漏洞
2022-03-02 00:00:00