The Per page add to head WordPress plugin through 1.4.4 does not properly sanitise one of its setting, allowing malicious HTML to be inserted by high privilege users even when the unfiltered_html capability is disallowed, which could lead to Cross-Site Scripting issues.
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6 | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6 | Exploit Third Party Advisory |
Configurations
History
21 Nov 2024, 05:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6 - Exploit, Third Party Advisory |
23 Sep 2021, 14:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://wpscan.com/vulnerability/f360f383-0646-44ca-b49e-e2258dfbf3a6 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:evona:per_page_add_to_head:*:*:*:*:*:wordpress:*:* | |
| CVSS |
v2 : v3 : |
v2 : 3.5
v3 : 4.8 |
13 Sep 2021, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-13 18:15
Updated : 2024-11-21 05:53
NVD link : CVE-2021-24619
Mitre link : CVE-2021-24619
CVE.ORG link : CVE-2021-24619
JSON object : View
Products Affected
evona
- per_page_add_to_head
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')