Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbABISHEIK MWPVDB-ID:A4C352DE-9815-4DFE-AC51-65B5BFB37438
HistoryJun 28, 2021 - 12:00 a.m.

Any Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS)

2021-06-2800:00:00
ABISHEIK M
wpscan.com
6

0.001 Low

EPSS

Percentile

24.9%

JSON

The plugin does not sanitise or escape its “Allowed hosts” setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it

PoC

As admin, put the following payload in the “Allowed host” setting of the plugin (/wp-admin/options-general.php#any-hostname):

CPENameOperatorVersion
any-hostnameeq*

Related

cve 1
cvelist 1
prion 1
nvd 1
cnvd 1
wpexploit 1
cve
cve
CVE-2021-24481
2021-08-02 11:15:10
cvelist
cvelist
CVE-2021-24481 Any Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS)
2021-08-02 10:32:21
prion
prion
Cross site scripting
2021-08-02 11:15:00
nvd
nvd
CVE-2021-24481
2021-08-02 11:15:10
cnvd
cnvd
WordPress The Any Hostname plugin cross-site scripting vulnerability
2021-08-05 00:00:00
wpexploit
wpexploit
Any Hostname <= 1.0.6 - Authenticated Stored Cross-Site Scripting (XSS)
2021-06-28 00:00:00

0.001 Low

EPSS

Percentile

24.9%

JSON
Related for WPVDB-ID:A4C352DE-9815-4DFE-AC51-65B5BFB37438
cve1cvelist1prion1nvd1cnvd1wpexploit1