Vulnerability Description
WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldnameDomain parameter. Attackers can inject JavaScript payloads through the plugin settings form at options.php that execute in the browsers of administrators viewing the settings page.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://wordpress.org/plugins/wp24-domain-check/
- https://www.exploit-db.com/exploits/49377
- https://www.vulncheck.com/advisories/wordpress-plugin-wp24-domain-check-stored-x
FAQ
What is CVE-2021-47984?
CVE-2021-47984 is a vulnerability with a CVSS score of 6.4 (MEDIUM). WordPress Plugin WP24 Domain Check 1.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input to the fieldna...
How severe is CVE-2021-47984?
CVE-2021-47984 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-47984?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.