CVE-2021-24211
WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
05 Apr 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.
Affected products
Unknown · WordPress Related PostsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →