QwikSec

Security Database

CVE

CWE

Training

CVE-2021-24605

Published: Sep 13, 2021

Modified: Aug 3, 2024

PUBLISHED

Description

The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue

Vendor	Product	Versions
Unknown	Custom Post View Generator	affected `0.4.6 - <= 0.4.6`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/e0be384c-3e63-49f6-b2ab-3024dcd88686

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.