Vulnerability Description
WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insufficient sanitization of the forum name parameter. Attackers can submit POST requests to the admin setup page with JavaScript payloads in the wps_admin_forum_add_name parameter, which are stored and executed when the forum is accessed.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- http://www.wpsymposiumpro.com/
- https://wordpress.org/plugins/wp-symposium-pro/
- https://www.exploit-db.com/exploits/50514
- https://www.vulncheck.com/advisories/wordpress-plugin-wp-symposium-pro-stored-xs
FAQ
What is CVE-2021-47927?
CVE-2021-47927 is a vulnerability with a CVSS score of 6.4 (MEDIUM). WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insufficient sanitization o...
How severe is CVE-2021-47927?
CVE-2021-47927 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47927?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.