QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24519

Published: Aug 16, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The VikRentCar Car Rental Management System WordPress plugin before 1.1.10 does not sanitise the 'Text Next to Icon' field when adding or editing a Characteristic, allowing high privilege users such as admin to use XSS payload in it, leading to an authenticated Stored Cross-Site Scripting issue

Vendor	Product	Versions
Unknown	VikRentCar Car Rental Management System	affected `1.1.10 - < 1.1.10`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/368828f9-fdd1-4a82-8658-20e0f4c4da0c

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.