Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2021/07/19 10:53 a.m.36 views

CVE-2021-24452 W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)

The W3 Total Cache WordPress plugin before 2.1.5 was affected by a reflected Cross-Site Scripting XSS issue within the "extension" parameter in the Extensions dashboard, when the 'Anonymously track usage to improve product quality' setting is enabled, as the parameter is output in a JavaScript...

6AI score0.01996EPSS
SaveExploits2References1
WPVulnDB
WPVulnDB
added 2021/06/28 12:0 a.m.26 views

W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)

The plugin was affected by a reflected Cross-Site Scripting XSS issue within the "extension" parameter in the Extensions dashboard, when the 'Anonymously track usage to improve product quality' setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This...

4.3CVSS5.8AI score0.01996EPSS
SaveExploits2Affected Software1
wpexploit
wpexploit
added 2021/06/28 12:0 a.m.276 views

W3 Total Cache < 2.1.5 - Reflected XSS in Extensions Page (JS Context)

The plugin was affected by a reflected Cross-Site Scripting XSS issue within the "extension" parameter in the Extensions dashboard, when the 'Anonymously track usage to improve product quality' setting is enabled, as the parameter is output in a JavaScript context without proper escaping. This...

4.3CVSS5.9AI score0.01996EPSS
SaveExploits2
Rows per page
Query Builder