CVE-2021-24489

Опубликовано: 25 окт. 2021

Источник: nvd

CVSS3: 4.8

CVSS2: 3.5

EPSS Низкий

Описание

The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

Ссылки

https://wpscan.com/vulnerability/36e8efe8-b29f-4c9e-9dd5-3e317aa43e0c
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/36e8efe8-b29f-4c9e-9dd5-3e317aa43e0c
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:emarketdesign:request_a_quote:*:*:*:*:*:wordpress:*:*

Версия до 2.3.5 (исключая)

EPSS

Процентиль: 51%

0.00643

Низкий

4.8 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-gqjm-7fj6-9xvx

CVSS3: 4.8

github

больше 4 лет назад

The Request a Quote WordPress plugin before 2.3.5 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

ALT-PU-2021-1996

CVSS3: 6.5

altlinux

больше 5 лет назад

ALT-PU-2021-1996: package `firmware-intel-ucode` update to version 16-alt1.20210608