CVE-2021-24592

MEDIO 4.8CVE-2021-24592 · Published 30/08/2021 · updated 17/06/2026

In breve

CVE-2021-24592 è una vulnerabilità MEDIO (CVSS 4.8) che riguarda sitewide notice (yoohooplugins).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.62%, superiore al 49.8% delle vulnerabilità.
Correzione: aggiornare a 2.3 o successiva.

Package	Affected versions	Patched versions
sitewide notice yoohooplugins	`< 2.3`	`2.3`

Description

The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

References

wpscan.com/vulnerability/9579ff13-9597-4a77-8cb9-997e35265d22 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free