Lucene search
PRIOn knowledge basePRION:CVE-2021-24556HistoryAug 23, 2021 - 12:15 p.m.
Cross site scripting
2021-08-2312:15:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
31.9%
The kento_email_subscriber_ajax AJAX action of the Email Subscriber WordPress plugin through 1.1, does not properly sanitise, validate and escape the submitted subscribe_email and subscribe_name POST parameters, inserting them in the DB and then outputting them back in the Subscriber list (/wp-admin/edit.php?post_type=kes_campaign&page=kento_email_subscriber_list_settings), leading a Stored XSS issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| email-subscriber | le | 1.1 |
Related
cve
cve
CVE-2021-24556
2021-08-23 12:15:09
patchstack
patchstack
nvd
nvd
CVE-2021-24556
2021-08-23 12:15:09
wpvulndb
wpvulndb
Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
2021-07-24 00:00:00
cvelist
cvelist
wpexploit
wpexploit
Email Subscriber <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
2021-07-24 00:00:00