Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24338

Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Singular Label' field parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pods Framework Team Pods – Custom Content Types and Fields

  • 2.4.4.1 to < 2.4.4.1*affected
  • 2.7.27 to < 2.7.27affected

References