CVE-2021-24338

CVE-2021-24338: Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)

Vendor Pods Framework Team
Product Pods – Custom Content Types and Fields
Weakness CWE-79 · XSS
Published June 21, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Singular Label' field parameter.

Key dates

02Disclosure timeline

June 21, 2021 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-36132 IBM Planning Analytics Local cross-site scripting CVE-2025-69326 WordPress NEX-Forms plugin <= 9.1.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-36182 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-49076 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-9003 D-Link DIR-818LW DHCP Reserved Address bsc_lan.php cross site scripting