CVE-2021-24577

MEDIUM

5.4

Descripcion

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.

Detalles CVE

Puntuacion CVSS v3.15.4

SeveridadMEDIUM

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosLOW

Interaccion usuarioREQUIRED

Publicado10/11/2021

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

wpdevart:coming_soon_and_maintenance_mode

Debilidades (CWE)

CWE-79

Referencias

https://wpscan.com/vulnerability/d453b547-41a8-4a6b-8349-8686b7054805(contact@wpscan.com)

https://wpscan.com/vulnerability/d453b547-41a8-4a6b-8349-8686b7054805(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.