Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbNeppahWPVDB-ID:E0BE384C-3E63-49F6-B2AB-3024DCD88686
HistoryAug 10, 2021 - 12:00 a.m.

Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting

2021-08-1000:00:00
Neppah
wpscan.com
11
custom post view
generator
version 0.4.6
reflected cross-site scripting
plugin
authenticated user
sanitize
escape
user input
ajax action
response

EPSS

0.001

Percentile

24.8%

JSON

The create_post_page AJAX action of the plugin (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue

PoC

Related

nvd 1
prion 1
cvelist 1
cve 1
patchstack 1
wpexploit 1
nvd
nvd
CVE-2021-24605
2021-09-13 18:15:16
prion
prion
Cross site scripting
2021-09-13 18:15:00
cvelist
cvelist
CVE-2021-24605 Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting
2021-09-13 17:56:28
cve
cve
CVE-2021-24605
2021-09-13 18:15:16
patchstack
patchstack
WordPress Custom Post View Generator plugin <= 0.4.6 - Reflected Cross-Site Scripting (XSS) vulnerability
2021-09-10 00:00:00
wpexploit
wpexploit
Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting
2021-08-10 00:00:00

EPSS

0.001

Percentile

24.8%

JSON
Related for WPVDB-ID:E0BE384C-3E63-49F6-B2AB-3024DCD88686
nvd1prion1cvelist1cve1patchstack1wpexploit1