CVE-2021-47984

The CVE-2021-47984 entry concerns the WordPress Plugin WP24 Domain Check 1.6.2, which has a stored XSS vulnerability in the fieldnameDomain parameter. Input submitted to the plugin settings form (options.php) can inject JavaScript that executes in the browsers of administrators viewing the settin...

WP24 Domain Check < 1.6.3 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin version 1.6.2 and possibly below, was vulnerable to Stored Cross-Site Scripting XSS in the plugin's fieldnameDomain settings parameter. The form did require a valid CSRF nonce, limiting the exploitability of the vulnerability. PoC In the plugin's advanced settings...