Lucene search
Juan David Ordoñez NoriegaWPVDB-ID:D1E9C995-37BD-4952-B88E-945E02E3C83FHistoryJan 20, 2021 - 12:00 a.m.
Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)
2021-01-2000:00:00
Juan David Ordoñez Noriega
wpscan.com
8
The plugin did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page.
PoC
The PoC will be displayed on April 16, 2021, to give users the time to update.
| CPE | Name | Operator | Version |
|---|---|---|---|
| advanced-custom-fields-pro | lt | 5.9.1 |
Related
prion
prion
Cross site scripting
2021-04-22 21:15:00
wpexploit
wpexploit
Advanced Custom Field Pro < 5.9.1 - Reflected Cross-Site Scripting (XSS)
2021-01-20 00:00:00
patchstack
patchstack
cve
cve
CVE-2021-24241
2021-04-22 21:15:00
Related for WPVDB-ID:D1E9C995-37BD-4952-B88E-945E02E3C83F