CVE-2021-24373

State: PUBLISHED · Published: 2021-06-21 · Updated: 2024-08-03 · Assigner: WPScan

Description

The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripting issue.

CWE

CWE-79 — CWE-79 Cross-site Scripting (XSS)

Affected

Unknown / WP Hardening – Fix Your WordPress Security — v=1.2.2 <1.2.2 [affected]

CVSS

(none)

References

https://wpscan.com/vulnerability/fcf17278-609f-4f75-8a87-9b4579dee1c8 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2021/24xxx/CVE-2021-24373.json