Lucene search
JrXnmWPEX-ID:DDE3C119-DAD9-4205-A931-D49BBF3B6B87HistoryJan 03, 2022 - 12:00 a.m.
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting
2022-01-0300:00:00
JrXnm
75
0.001 Low
EPSS
Percentile
40.3%
The plugin does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue
https://exampe.com/wp-admin/admin.php?page=wpassetcleanup_settings&wpacu_selected_sub_tab_area=xxxxx%22+accesskey%3DX+onclick%3Dalert%281%29+test%3D%22Related
cve
cve
CVE-2021-24937
2022-02-01 13:15:08
patchstack
patchstack
cvelist
cvelist
CVE-2021-24937 Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting
2022-02-01 12:21:32
cnvd
cnvd
prion
prion
Cross site scripting
2022-02-01 13:15:00
nvd
nvd
CVE-2021-24937
2022-02-01 13:15:08
wpvulndb
wpvulndb
Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting
2022-01-03 00:00:00
openvas
openvas