Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24211

WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WordPress Related Posts

  • 3.6.4 to ≤ 3.6.4affected

References