CVE-2021-24481

{"id": "CVE-2021-24481", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.7}]}, "published": "2021-08-02T11:15:10.653", "references": [{"url": "https://wpscan.com/vulnerability/a4c352de-9815-4dfe-ac51-65b5bfb37438", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/a4c352de-9815-4dfe-ac51-65b5bfb37438", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "contact@wpscan.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its \"Allowed hosts\" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it"}, {"lang": "es", "value": "El plugin de WordPress Any Hostname versiones hasta 1.0.6, no sanea ni escapa de su configuraci\u00f3n \"Allowed hosts\", conllevando a un problema de tipo XSS almacenado autenticado, ya que los usuarios muy privilegiados son capaces de ajustar cargas \u00fatiles de tipo XSS en \u00e9l"}], "lastModified": "2024-11-21T05:53:09.100", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:any_hostname_project:any_hostname:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "E154A5EE-9904-4B1D-B35A-E6774336450E", "versionEndIncluding": "1.0.6"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}