Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-36914
HistoryApr 12, 2022 - 5:15 p.m.

CVE-2021-36914

2022-04-1217:15:08
CWE-79
CWE-352
[email protected]
web.nvd.nist.gov
cve-2021-36914
csrf
reflected cross-site scripting
calderawp license manager
wordpress plugin

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

20.9%

JSON

Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Manager (WordPress plugin) <= 1.2.11.

Affected configurations

Nvd
Node
claderaformcalderawp_license_managerRange≤1.2.11wordpress
VendorProductVersionCPE
claderaformcalderawp_license_manager*cpe:2.3:a:claderaform:calderawp_license_manager:*:*:*:*:*:wordpress:*:*

Related

cvelist 1
prion 1
wpvulndb 1
osv 1
patchstack 1
cve 1
cvelist
cvelist
CVE-2021-36914 WordPress CalderaWP License Manager plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS)
2022-04-12 16:11:18
prion
prion
Cross site request forgery (csrf)
2022-04-12 17:15:00
wpvulndb
wpvulndb
CalderaWP License Manager <= 1.2.11 - Reflected Cross-Site Scripting
2022-04-12 00:00:00
osv
osv
CVE-2021-36914
2022-04-12 17:15:08
patchstack
patchstack
WordPress CalderaWP License Manager plugin <= 1.2.11 - Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS)
2022-04-12 00:00:00
cve
cve
CVE-2021-36914
2022-04-12 17:15:08

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

20.9%

JSON
Related for NVD:CVE-2021-36914
cvelist1prion1wpvulndb1osv1patchstack1cve1