CVE-2021-24333

CVE-2021-24333: Content Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

Vendor Unknown
Product Content Copy Protection & Prevent Image Save
Weakness CWE-352 · CSRF
Published June 1, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.

Key dates

02Disclosure timeline

June 1, 2021 CVE published
August 3, 2024 Record updated