CVE-2021-24479
Assigner: WPScan
Published: 2021-08-02T10:32:19
State: PUBLISHED
affected: product: DrawBlog
vendor: Unknown
versions: lessThanOrEqual: 0.90
status: affected
version: 0.90
versionType: custom
credits: value: ABISHEIK M
descriptions: value: The DrawBlog WordPress plugin through 0.90 does not sanitise or validate some of its settings before outputting them back in the page, leading to an authenticated stored Cross-Site Scripting issue
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: UNKNOWN
title: DrawBlog <= 0.90 - Authenticated Stored Cross-Site Scripting (XSS)
x_generator: WPScan CVE Generator