CVE-2021-24678
Assigner: WPScan
Published: 2021-10-04T11:20:21
State: PUBLISHED
affected: product: CM Tooltip Glossary – Better SEO and UEX for your WP site
vendor: Unknown
versions: lessThan: 3.9.21
status: affected
version: 3.9.21
versionType: custom
credits: value: apple502j
descriptions: value: The CM Tooltip Glossary WordPress plugin before 3.9.21 does not escape some glossary_tooltip shortcode attributes, which could allow users a role as low as Contributor to perform Stored Cross-Site Scripting attacks
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: CM Tooltip Glossary < 3.9.21 - Contributor+ Stored Cross-Site Scripting
x_generator: WPScan CVE Generator