Логотип exploitDog
bind:CVE-2021-24334
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-24334

Количество 3

Количество 3

nvd логотип

CVE-2021-24334

около 4 лет назад

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue.

CVSS3: 5.4
EPSS: Низкий
github логотип

GHSA-wfh8-qv3m-93p3

около 3 лет назад

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue.

EPSS: Низкий
fstec логотип

BDU:2021-03857

около 4 лет назад

Уязвимость параметров unsplash_download_w и unsplash_download_h плагина Instant Images One Click - Unsplash Uploads системы управления содержимым сайта WordPress, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2021-24334

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue.

CVSS3: 5.4
0%
Низкий
около 4 лет назад
github логотип
GHSA-wfh8-qv3m-93p3

The Instant Images – One Click Unsplash Uploads WordPress plugin before 4.4.0.1 did not properly validate and sanitise its unsplash_download_w and unsplash_download_h parameter settings (/wp-admin/upload.php?page=instant-images), only validating them client side before saving them, leading to a Stored Cross-Site Scripting issue.

0%
Низкий
около 3 лет назад
fstec логотип
BDU:2021-03857

Уязвимость параметров unsplash_download_w и unsplash_download_h плагина Instant Images One Click - Unsplash Uploads системы управления содержимым сайта WordPress, позволяющая нарушителю осуществлять межсайтовые сценарные атаки

CVSS3: 5.4
0%
Низкий
около 4 лет назад

Уязвимостей на страницу