CVE-2021-36914

2022-04-1217:15:08

Google

osv.dev

cve-2021-36914

cross-site request forgery

reflected cross-site scripting

calderawp license manager

wordpress plugin

AI Score

6.3

Confidence

High

EPSS

0.001

Percentile

20.9%

JSON

Cross-Site Request Forgery (CSRF) vulnerability leading to Reflected Cross-Site Scripting (XSS) in CalderaWP License Manager (WordPress plugin) <= 1.2.11.

References

github.com/CalderaWP/calderawp-license-manager

patchstack.com/database/vulnerability/calderawp-license-manager/wordpress-calderawp-license-manager-plugin-1-2-11-cross-site-request-forgery-csrf-vulnerability-leading-to-reflected-cross-site-scripting-xss