CVE-2021-24785

Katalog CVE

CVSS 4.8 · Medium EPSS 0,62%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada great-quotes project great-quotes. Skor CVSS 3.1 4.8 (Medium) menurut NVD.

Deskripsi (NVD)

The Great Quotes WordPress plugin through 1.0.0 does not sanitise and escape the Quote and Author fields of its Quotes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

Rincian

Terbit di NVD

25 Oktober 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.8 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wpscan.com/vulnerability/3957056c-df25-41f7-ab0d-1d09222f2fa5 exploit · advisory pihak ketiga