CVE-2021-24338

Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)

EPSS 0.8%CWE-79

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 jun 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Singular Label' field parameter.

Productos afectados

Pods Framework Team · Pods – Custom Content Types and Fields

Referencias

https://wpscan.com/vulnerability/d5b015f3-90c7-4d51-a71d-630d60965151 https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24338