CVE-2021-24605

CVE-2021-24605: Custom Post View Generator <= 0.4.6 - Reflected Cross-Site Scripting

Vendor Unknown
Product Custom Post View Generator
Weakness CWE-79 · XSS
Published September 13, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The create_post_page AJAX action of the Custom Post View Generator WordPress plugin through 0.4.6 (available to authenticated user) does not sanitise or escape user input before outputting it back in the response, leading to a Reflected Cross-Site issue

Key dates

02Disclosure timeline

September 13, 2021 CVE published
August 3, 2024 Record updated