Lucene search
+L
DraftpressMy Site Audit

1 matches found

CVE
CVE
added 2021/08/16 10:48 a.m.62 views

CVE-2021-24445

CVE-2021-24445 affects the WordPress My Site Audit plugin up to version 1.2.4. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) caused by failure to sanitize/escape the Audit Name field when creating audits, allowing a high-privilege user to inject JavaScript payloads even ...

5.5CVSS5AI score0.00656EPSS
Save