QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2021-24124

Back to search

CVE-2021-24124

Published: Mar 18, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown could lead to privileged escalation.

VendorProductVersions

Unknown

WP Shieldon

affected
1.6.3 - <= 1.6.3

Weaknesses (CWE)

CWE-79

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now