Vulnerability Description
The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenticated Stored Cross-Site Scripting issue
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nextscripts | Social Networks Auto Poster | < 4.3.24 |
Related Weaknesses (CWE)
References
- https://plugins.trac.wordpress.org/changeset/2650138PatchThird Party Advisory
- https://wpscan.com/vulnerability/b99dae3d-8230-4427-adc5-4ef9cbfb8ba1ExploitThird Party Advisory
- https://plugins.trac.wordpress.org/changeset/2650138PatchThird Party Advisory
- https://wpscan.com/vulnerability/b99dae3d-8230-4427-adc5-4ef9cbfb8ba1ExploitThird Party Advisory
FAQ
What is CVE-2021-24975?
CVE-2021-24975 is a vulnerability with a CVSS score of 6.1 (MEDIUM). The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.24 does not sanitise and escape logged requests before outputting them in the related admin dashboard, leading to an Unauthenti...
How severe is CVE-2021-24975?
CVE-2021-24975 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-24975?
Check the references section above for vendor advisories and patch information. Affected products include: Nextscripts Social Networks Auto Poster.