CVE Database
/

CVE-2021-24479

Back to search

CVE-2021-24479

Published: Aug 2, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue

VendorProductVersions

Unknown

DrawBlog

affected
0.90 - <= 0.90

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now