Lucene search
PRIOn knowledge basePRION:CVE-2021-4227HistoryJan 16, 2024 - 4:15 p.m.
Code injection
2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
4
ark-commenteditor
source editor
iframe injection
arbitrary content
The ark-commenteditor WordPress plugin through 2.15.6 does not properly sanitise or encode the comments when in Source editor, allowing attackers to inject an iFrame in the page and thus load arbitrary content from any page to the comment section
| CPE | Name | Operator | Version |
|---|---|---|---|
| ark_wysiwyg_comment_editor | le | 2.15.6 |
Related
patchstack
patchstack
cve
cve
CVE-2021-4227
2024-01-16 16:15:09
cvelist
cvelist
CVE-2021-4227 Ark Comment Editor <= 2.15.6 - Iframe Injection via Comment
2024-01-16 15:52:25
nvd
nvd
CVE-2021-4227
2024-01-16 16:15:09