Lucene search
+L

3 matches found

CVE
CVE
added 2021/09/20 7:59 p.m.46 views

CVE-2021-39325

The CVE-2021-39325 entry concerns the WordPress OptinMonster plugin, vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the load_previews function of OMAPI/Output.php, affecting versions up to 2.6.0. The risk is described as XSS with network attacker-access, no a...

6.1CVSS6.1AI score0.00905EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2021/09/20 7:59 p.m.27 views

CVE-2021-39325 OptinMonster <= 2.6.0 Reflected Cross-Site Scripting

The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the loadpreviews function found in the /OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.6.0...

6.1CVSS6.2AI score0.00905EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2021/09/20 7:59 p.m.9 views

CVE-2021-39325 OptinMonster <= 2.6.0 Reflected Cross-Site Scripting

The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the loadpreviews function found in the /OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.6.0...

6.1CVSS6.1AI score0.00905EPSS
SaveExploits0References2
Rows per page
Query Builder