Lucene search
JrXnmWPEX-ID:0AA5A8D5-E736-4CD3-ABFD-8E0A356BB6EFHistoryJan 03, 2022 - 12:00 a.m.
Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting
2022-01-0300:00:00
JrXnm
58
0.001 Low
EPSS
Percentile
30.0%
The plugin does not sanitise and escape the wyp_page_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue
https://example.com/wp-admin/admin.php?page=yellow-pencil-editor&href=1&wyp_page_id=home&wyp_page_type=home&wyp_mode=single&wyp_page_type=<script>alert(/XSS/)</script>Related
patchstack
patchstack
nvd
nvd
CVE-2021-24934
2022-02-01 13:15:08
cve
cve
CVE-2021-24934
2022-02-01 13:15:08
cnvd
cnvd
WordPress Visual CSS Style Editor plugin cross-site scripting vulnerability
2022-02-10 00:00:00
prion
prion
Cross site scripting
2022-02-01 13:15:00
cvelist
cvelist
wpvulndb
wpvulndb
Visual CSS Style Editor < 7.5.4 - Reflected Cross-Site Scripting
2022-01-03 00:00:00