CVE-2021-24567
Assigner: WPScan
Published: 2024-01-16T15:48:43.806Z
State: PUBLISHED
title: Simple Post <= 1.1 - Authenticated Stored Cross-Site Scripting (XSS)
problemTypes: descriptions: description: CWE-79 Cross-Site Scripting (XSS)
type: CWE
affected: vendor: Unknown
product: Simple Post
versions: status: affected
versionType: semver
version: 0
lessThanOrEqual: 1.1
defaultStatus: affected
collectionURL: https://wordpress.org/plugins
descriptions: value: The Simple Post WordPress plugin through 1.1 does not sanitize user input when an authenticated user Text value, then it does not escape these values when outputting to the browser leading to an Authenticated Stored XSS Cross-Site Scripting issue.
credits: value: Vikas Srivastava
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator