Lucene search

K
osvGoogleOSV:CVE-2021-24871
HistoryDec 13, 2021 - 11:15 a.m.

CVE-2021-24871

2021-12-1311:15:09
Google
osv.dev
3
wordpress
plugin
cross-site scripting

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

24.8%

The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

24.8%