Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:57 p.m.•17 views

CVE-2021-24612

The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfilteredhtml capability is disallowed...

4.8CVSS6AI score0.00643EPSS
SaveExploits2References1
osv_cve
osv_cve
•added 2021/10/18 2:15 p.m.•15 views

CVE-2021-24612

The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00643EPSS
SaveExploits2References1
NVD
NVD
•added 2021/10/18 2:15 p.m.•34 views

CVE-2021-24612

The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfilteredhtml capability is disallowed...

4.8CVSS0.00643EPSS
SaveExploits2References1
Prion
Prion
•added 2021/10/18 2:15 p.m.•26 views

Cross site scripting

The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfilteredhtml capability is disallowed...

3.5CVSS4.8AI score0.00643EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/10/18 12:00 a.m.•6 views

PT-2021-16128

Name of the Vulnerable Software and Affected Versions Sociable WordPress plugin versions 4.3.4.1 and earlier Description The issue allows high privilege users to perform Cross-Site Scripting attacks against other users, even when the unfiltered html capability is disallowed, due to the plugin not...

4.8CVSS0.00643EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•7 views

CVE-2021-24612: Improper Neutralization of Input During Web Page Generation

The Sociable WordPress plugin through 4.3.4.1 does not sanitise or escape some of its settings before outputting them in the admins dashboard, allowing high privilege users to perform Cross-Site Scripting attacks against other users even when the unfilteredhtml capability is disallowed...

4.8CVSS5.8AI score0.00643EPSS
SaveExploits2References3
Rows per page
Query Builder