CVE-2021-24897

MEDIUM 5.4CVE-2021-24897 · Published 14/03/2022 · updated 17/06/2026

In short

CVE-2021-24897 is a MEDIUM (CVSS 5.4) vulnerability affecting add subtitle (viitorcloud).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 49.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
add subtitle viitorcloud	`≤ 1.1.0`	No fix yet

Description

The Add Subtitle WordPress plugin through 1.1.0 does not sanitise or escape the sub-title field (available only with classic editor) when output in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

References

wpscan.com/vulnerability/a0dd1da8-f8d2-453d-a2f2-711a49fb6466 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free