CVE-2021-34660

MEDIUM

WP Fusion Lite <= 3.37.18 Reflected Cross-Site Scripting

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-34660 has a selected CVSS score of 6.1 (medium).

Description

The WP Fusion Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the startdate parameter found in the ~/includes/admin/logging/class-log-table-list.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.37.18.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 23, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

WP Fusion Lite

Browse Very Good Plugins / WP Fusion Lite
CVE List3.37.18 to ≤ 3.37.18affected

References

3