CVE-2021-25086

CVE-2021-25086: Advanced Page Visit Counter < 6.1.2 - Unauthenticated Stored Cross-Site Scripting

Vendor Unknown

Product Advanced Page Visit Counter – Advanced WordPress Visit Counter

Weakness CWE-79 · XSS

Published May 2, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Advanced Page Visit Counter WordPress plugin before 6.1.2 does not sanitise and escape some input before outputting it in an admin dashboard page, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against admins viewing it

Key dates

02Disclosure timeline

May 2, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-25086 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html