Lucene search
WordfenceCVELIST:CVE-2021-38321HistorySep 09, 2021 - 6:10 p.m.
CVE-2021-38321 Custom Menu Plugin <= 1.3.3 Reflected Cross-Site Scripting
2021-09-0918:10:10
CWE-79
Wordfence
www.cve.org
3
wordpress
plugin
xss
vulnerability
custom menu
1.3.3
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.7%
The Custom Menu Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the selected_menu parameter found in the ~/custom-menus.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.3.3.
CNA Affected
[
{
"product": "Custom Menu Plugin",
"vendor": "Custom Menu Plugin",
"versions": [
{
"lessThanOrEqual": "1.3.3",
"status": "affected",
"version": "1.3.3",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2021-38321
2021-09-09 19:15:13
cve
cve
CVE-2021-38321
2021-09-09 19:15:13
patchstack
patchstack
prion
prion
Cross site scripting
2021-09-09 19:15:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
32.7%
Related for CVELIST:CVE-2021-38321