Lucene search
+L

4 matches found

Circl
Circl
added 2021/03/18 5:32 p.m.6 views

CVE-2021-24127

creationtimestamp| type| source ---|---|--- 2021-03-18 17:32:28+00:00| seen| https://t.me/cibsecurity/25108...

5.4CVSS5.5AI score0.00653EPSS
SaveExploits2References1
OSV
OSV
added 2021/03/18 3:15 p.m.5 views

CVE-2021-24127

Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting XSS, which could lead to privilege escalation...

5.4CVSS5.8AI score0.00653EPSS
SaveExploits2References1
CVE
CVE
added 2021/03/18 2:57 p.m.60 views

CVE-2021-24127

The CVE-2021-24127 entry affects the WordPress plugin ThirstyAffiliates Affiliate Link Manager, versions before 3.9.3. The issue is an authenticated Stored Cross-Site Scripting (XSS) caused by unvalidated input and lack of output encoding in the plugin, with potential privilege escalation as desc...

5.4CVSS5.2AI score0.00653EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2021/03/18 2:57 p.m.24 views

CVE-2021-24127 ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS

Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting XSS, which could lead to privilege escalation...

5.5AI score0.00653EPSS
SaveExploits2References1
Rows per page
Query Builder