Lucene search
WPScanCVELIST:CVE-2021-24972HistoryDec 13, 2021 - 10:41 a.m.
CVE-2021-24972 Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting
2021-12-1310:41:32
CWE-79
WPScan
www.cve.org
1
pixel cat lite
wordpress plugin
cross-site scripting
EPSS
0.001
Percentile
24.8%
The Pixel Cat WordPress plugin before 2.6.3 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
CNA Affected
[
{
"product": "Pixel Cat – Conversion Pixel Manager",
"vendor": "Unknown",
"versions": [
{
"lessThan": "2.6.3",
"status": "affected",
"version": "2.6.3",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2021-24972
2021-12-13 11:15:09
nvd
nvd
CVE-2021-24972
2021-12-13 11:15:09
prion
prion
Cross site scripting
2021-12-13 11:15:00
patchstack
patchstack
wpvulndb
wpvulndb
Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting
2021-11-15 00:00:00
wpexploit
wpexploit
Pixel Cat Lite < 2.6.3 - Admin+ Stored Cross-Site Scripting
2021-11-15 00:00:00