Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site Scripting. Plugin settings not escaping attribute output, allowing XSS attacks by high privilege users
Reporter | Title | Published | Views | Family All 7 |
---|---|---|---|---|
Prion | Cross site scripting | 1 Nov 202109:15 | – | prion |
wpexploit | Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site Scripting | 28 Sep 202100:00 | – | wpexploit |
NVD | CVE-2021-24789 | 1 Nov 202109:15 | – | nvd |
Cvelist | CVE-2021-24789 Flat Preloader < 1.5.5 - Admin+ Stored Cross-Site Scripting | 1 Nov 202108:46 | – | cvelist |
CVE | CVE-2021-24789 | 1 Nov 202109:15 | – | cve |
Patchstack | WordPress Flat Preloader plugin <= 1.5.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability | 28 Sep 202100:00 | – | patchstack |
CNVD | WordPress Flat Preloader plugin cross-site scripting vulnerability | 4 Nov 202100:00 | – | cnvd |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo