CVE-2021-25101

MOYENNE 4.8CVE-2021-25101 · Published 21/02/2022 · updated 17/06/2026

En bref

CVE-2021-25101 est une vulnérabilité MOYENNE (CVSS 4.8) touchant anti-malware security and brute-force firewall (anti-malware security and brute-force firewall project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.60%, plus élevée que 48.8% des vulnérabilités.
Correctif : mettre à jour vers 4.20.94 ou plus récent.

Package	Affected versions	Patched versions
anti-malware security and brute-force firewall anti-malware_security_and_brute-force_firewall_project	`< 4.20.94`	`4.20.94`

Description

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.94 does not sanitise and escape the POST data before outputting it back in attributes of an admin page, leading to a Reflected Cross-Site scripting. Due to the presence of specific parameter value, available to admin users, this can only be exploited by an admin against another admin user.

References

wpscan.com/vulnerability/5fd0380c-0d1d-4380-96f0-a07be5a61eba · Exploit

Autres vulnérabilités de anti-malware security and brute-force firewall

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free