CVE-2021-20746

State: PUBLISHED · Published: 2021-06-28 · Updated: 2024-08-03 · Assigner: jpcert

Description

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

CWE

(none)

Affected

Hector Cabrera / WordPress Popular Posts — v=5.3.2 and earlier [affected]

CVSS

(none)

References

https://wordpress.org/plugins/wordpress-popular-posts/ x_refsource_MISC
https://cabrerahector.com/wordpress/wordpress-popular-posts-5-3-improved-php-8-support-retina-display-support-and-more/#minor-updates-and-hotfixes x_refsource_MISC
https://cabrerahector.com/ x_refsource_MISC
https://jvn.jp/en/jp/JVN63066062/index.html x_refsource_MISC

Source

cvelistV5-main/cves/2021/20xxx/CVE-2021-20746.json