CVE-2021-24335

MEDIUM NUCLEI

Car Repair Services & Auto Mechanic WordPress Theme < 4.0 - Reflected XSS via Service Estimate Key

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2021-24335 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue

Nuclei Templates (1)

WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting
MEDIUMby daffainfo

References (3)

Core 3

Scores

CVSS v3 6.1
EPSS 0.0388
EPSS Percentile 88.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
smartdatasoft/car_repair_services_\&_auto_mechanic < 4.0
Published Jun 01, 2021
Tracked Since Feb 18, 2026