CVE-2021-24411
Social Tape <= 1.0 - CSRF to Stored XSS
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
16 ago 2021Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack
Produtos afetados
Unknown · Social Tape