CVE-2021-24582

CVE-2021-24582: ThinkTwit < 1.7.1 - Authenticated Stored Cross-Site Scripting (XSS)

Vendor Unknown
Product ThinkTwit
Weakness CWE-79 · XSS
Published September 20, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue.

Key dates

02Disclosure timeline

September 20, 2021 CVE published
August 3, 2024 Record updated