CVE-2021-24211

CVE-2021-24211: WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)

Vendor Unknown

Product WordPress Related Posts

Weakness CWE-79 · XSS

Published April 5, 2021

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.

Key dates

02Disclosure timeline

April 5, 2021 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-24211 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html