Lucene search
PRIOn knowledge basePRION:CVE-2021-25106HistoryFeb 07, 2022 - 4:15 p.m.
Cross site scripting
2022-02-0716:15:00
PRIOn knowledge base
www.prio-n.com
5
0.001 Low
EPSS
Percentile
21.3%
The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any authenticated users, such as subscriber, to update them. Furthermore, due to the lack of sanitisation and escaping, it could lead to Stored Cross-Site Scripting
| CPE | Name | Operator | Version |
|---|---|---|---|
| wplegalpages | lt | 2.7.1 |
Related
cvelist
cvelist
nvd
nvd
CVE-2021-25106
2022-02-07 16:15:45
cve
cve
CVE-2021-25106
2022-02-07 16:15:45
wpvulndb
wpvulndb
WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS
2022-01-05 00:00:00
patchstack
patchstack
wpexploit
wpexploit
WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS
2022-01-05 00:00:00