Lucene search
Satyender YadavPATCHSTACK:0F3D0B977E0D5647DA858E4D6ACB6DA9HistoryJun 14, 2021 - 12:00 a.m.
WordPress VikRentCar plugin <= 1.1.6 - Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS)
2021-06-1400:00:00
Satyender Yadav
patchstack.com
5
0.001 Low
EPSS
Percentile
21.2%
Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) discovered by Satyender Yadav in WordPress VikRentCar plugin (versions <= 1.1.6).
Solution
Update the WordPress VikRentCar plugin to the latest available version (at least 1.1.7).
| CPE | Name | Operator | Version |
|---|---|---|---|
| vikrentcar | le | 1.1.6 |
Related
wpvulndb
wpvulndb
Vik Rent Car < 1.1.7 - CSRF to Stored XSS
2021-06-14 00:00:00
nvd
nvd
CVE-2021-24388
2021-07-06 11:15:08
wpexploit
wpexploit
Vik Rent Car < 1.1.7 - CSRF to Stored XSS
2021-06-14 00:00:00
prion
prion
Cross site scripting
2021-07-06 11:15:00
cvelist
cvelist
CVE-2021-24388 Vik Rent Car < 1.1.7 - CSRF to Stored XSS
2021-07-06 11:03:29
cve
cve
CVE-2021-24388
2021-07-06 11:15:08
cnvd
cnvd
WordPress Plugin Cross-Site Scripting Vulnerability (CNVD-2021-59601)
2021-07-08 00:00:00