Lucene search
PRIOn knowledge basePRION:CVE-2021-25107HistoryFeb 14, 2022 - 12:15 p.m.
Cross site scripting
2022-02-1412:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
31.8%
The Form Store to DB WordPress plugin before 1.1.1 does not sanitise and escape parameter keys before outputting it back in the created entry, allowing unauthenticated attacker to perform Cross-Site Scripting attacks against admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| form_store_to_db | lt | 1.1.1 |
Related
cve
cve
CVE-2021-25107
2022-02-14 12:15:15
cvelist
cvelist
nvd
nvd
CVE-2021-25107
2022-02-14 12:15:15
patchstack
patchstack
cnvd
cnvd
WordPress Form Store to DB plugin cross-site scripting vulnerability
2022-02-16 00:00:00
wpexploit
wpexploit
Form Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
2022-01-17 00:00:00
wpvulndb
wpvulndb
Form Store to DB < 1.1.1 - Unauthenticated Stored Cross-Site Scripting
2022-01-17 00:00:00