QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24346

Published: Jun 14, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue

Vendor	Product	Versions
Unknown	Stock in & out	affected `1.0.4 - <= 1.0.4`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/c25146fd-4143-463c-8c85-05dd33e9a77b

x_refsource_CONFIRM

https://codevigilant.com/disclosure/2021/wp-plugin-stock-in/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.