CVE-2021-42547 MEDIUM

CVE-2021-42547: reflected XSS in search functionality of WP Cloud Plugins - Out-of-the-Box

Vendor Wp Cloud Plugins
Product Out-of-the-Box
Weakness CWE-79 · XSS
Published December 13, 2021
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

What the vulnerability does

01Description

Insufficient Input Validation in the search functionality of Wordpress plugin Out-of-the-Box prior to 1.20.3 allows unauthenticated user to craft a reflected Cross-Site Scripting attack.

Key dates

02Disclosure timeline

December 13, 2021 CVE published
August 4, 2024 Record updated