Lucene search
Krzysztof ZającPATCHSTACK:E30413C303FDFF83124C48F8E46C6F66HistoryJan 05, 2022 - 12:00 a.m.
WordPress WPLegalPages plugin <= 2.7.0 - Arbitrary Settings Update to Stored Cross-Site Scripting (XSS) vulnerability
2022-01-0500:00:00
Krzysztof Zając
patchstack.com
5
wordpress wplegalpages
arbitrary settings
cross-site scripting
xss
krzysztof zając
update
EPSS
0.001
Percentile
21.1%
Arbitrary Settings Update to Stored Cross-Site Scripting (XSS) vulnerability discovered by Krzysztof Zając in WordPress WPLegalPages plugin (versions <= 2.7.0).
Solution
Update the WordPress WPLegalPages plugin to the latest available version (at least 2.7.1).
Related
cvelist
cvelist
prion
prion
Cross site scripting
2022-02-07 16:15:00
wpvulndb
wpvulndb
WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS
2022-01-05 00:00:00
wpexploit
wpexploit
WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS
2022-01-05 00:00:00
nvd
nvd
CVE-2021-25106
2022-02-07 16:15:45
cve
cve
CVE-2021-25106
2022-02-07 16:15:45