CVE-2021-24901

MEDIUM

Security Audit <= 1.0.0 - Admin+ Stored Cross Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-24901 has a selected CVSS score of 4.8 (medium); EIP currently links 1 catalogued exploit.

Description

The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

Security Audit

CVE List1.0.0 to ≤ 1.0.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin Security Audit 1.0.0 - Stored Cross Site Scripting (XSS)ExploitDB exploitby Shweta MahajanNot analyzed1 file
ExploitDB
PoC details

References

2