QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24389

Published: Jul 6, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability.

Vendor	Product	Versions
Chimpstudio	WP Foodbakery	affected `2.2 - < 2.2`
Chimpstudio	FoodBakery	affected `2.2 - < 2.2`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/23b8b8c4-cded-4887-a021-5f3ea610213b

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.