Lucene search
PRIOn knowledge basePRION:CVE-2021-24519HistoryAug 16, 2021 - 11:15 a.m.
Cross site scripting
2021-08-1611:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
24.8%
The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the ‘Text Next to Icon’ field when adding or editing a Characteristic, allowing high privilege users such as admin to use XSS payload in it, leading to an authenticated Stored Cross-Site Scripting issue
| CPE | Name | Operator | Version |
|---|---|---|---|
| car_rental_management_system | lt | 1.1.10 |
Related
cnvd
cnvd
nvd
nvd
CVE-2021-24519
2021-08-16 11:15:08
wpexploit
wpexploit
Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)
2021-07-19 00:00:00
cve
cve
CVE-2021-24519
2021-08-16 11:15:08
cvelist
cvelist
wpvulndb
wpvulndb
Vik Rent Car < 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS)
2021-07-19 00:00:00