Lucene search
+L

3 matches found

attackerkb
attackerkb
•added 2021/04/05 7:15 p.m.•10 views

CVE-2021-24211

The WordPress Related Posts plugin through 3.6.4 contains an authenticated admin+ stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser...

5.4CVSS6.1AI score0.00628EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/04/05 6:27 p.m.•38 views

CVE-2021-24211 WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)

The WordPress Related Posts plugin through 3.6.4 contains an authenticated admin+ stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser...

5.5AI score0.00628EPSS
SaveExploits2References1
CVE
CVE
•added 2021/04/05 6:27 p.m.•68 views

CVE-2021-24211

The CVE-2021-24211 entry describes an authenticated (admin+) stored XSS vulnerability in the WordPress Related Posts plugin up to version 3.6.4, triggered via the title field on the settings page. Exploitation allows execution of JavaScript in a user’s browser. Affected software: WordPress Relate...

5.4CVSS5.2AI score0.00628EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder