Lucene search
PRIOn knowledge basePRION:CVE-2021-24528HistoryAug 30, 2021 - 3:15 p.m.
Cross site scripting
2021-08-3015:15:00
PRIOn knowledge base
www.prio-n.com
9
0.001 Low
EPSS
Percentile
24.8%
The FluentSMTP WordPress plugin before 2.0.1 does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SMTP settings set by this plugin, leading to a stored cross site scripting (XSS) vulnerability. Only users with roles capable of managing plugins can modify the plugin’s settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fluentsmtp | lt | 2.0.1 |
Related
cvelist
cvelist
CVE-2021-24528 FluentSMTP < 2.0.1 - Authenticated Stored XSS
2021-08-30 14:11:20
wpexploit
wpexploit
FluentSMTP < 2.0.1 - Authenticated Stored XSS
2021-07-29 00:00:00
openvas
openvas
WordPress FluentSMTP Plugin < 2.0.1 XSS Vulnerability
2023-03-27 00:00:00
nvd
nvd
CVE-2021-24528
2021-08-30 15:15:07
wpvulndb
wpvulndb
FluentSMTP < 2.0.1 - Authenticated Stored XSS
2021-07-29 00:00:00
cve
cve
CVE-2021-24528
2021-08-30 15:15:07
patchstack
patchstack