Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24577

Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Coming soon and Maintenance mode

  • 3.5.3 to < 3.5.3affected

References