1. Home
  2. CVE Database
  3. CVE-2021-24211
MEDIUM · 5.4

CVE-2021-24211

The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to exe...

Vulnerability Description

The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.

CVSS Score

5.4

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
SovrnWordpress Related Posts<= 3.6.4

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2021-24211?

CVE-2021-24211 is a vulnerability with a CVSS score of 5.4 (MEDIUM). The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to exe...

How severe is CVE-2021-24211?

CVE-2021-24211 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-24211?

Check the references section above for vendor advisories and patch information. Affected products include: Sovrn Wordpress Related Posts.