Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-24567

Simple Post <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Simple Post WordPress plugin through 1.1 does not sanitize user input when an authenticated user Text value, then it does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Simple Post

Default version status: affected

  • 0 to ≤ 1.1affected

References