Lucene search
PRIOn knowledge basePRION:CVE-2021-24871HistoryDec 13, 2021 - 11:15 a.m.
Cross site scripting
2021-12-1311:15:00
PRIOn knowledge base
www.prio-n.com
1
0.001 Low
EPSS
Percentile
25.0%
The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks
| CPE | Name | Operator | Version |
|---|---|---|---|
| get_custom_field_values | lt | 4.0.1 |
Related
patchstack
patchstack
osv
osv
CVE-2021-24871
2021-12-13 11:15:09
wpexploit
wpexploit
Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site Scripting
2021-11-09 00:00:00
cvelist
cvelist
wpvulndb
wpvulndb
Get Custom Field Values < 4.0.1 - Contributor+ Stored Cross-Site Scripting
2021-11-09 00:00:00
cve
cve
CVE-2021-24871
2021-12-13 11:15:09
cnvd
cnvd
WordPress Get Custom Field Values plugin cross-site scripting vulnerability
2021-12-18 00:00:00
nvd
nvd
CVE-2021-24871
2021-12-13 11:15:09