CVE-2021-24821

MEDIO 5.4CVE-2021-24821 · Published 07/03/2022 · updated 17/06/2026

In breve

CVE-2021-24821 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda cost calculator (nicdark).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.60%, superiore al 49.0% delle vulnerabilità.
Correzione: aggiornare a 1.6 o successiva.

Package	Affected versions	Patched versions
cost calculator nicdark	`< 1.6`	`1.6`

Description

The Cost Calculator WordPress plugin before 1.6 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the Description fields of a Cost Calculator > Price Settings (which gets injected on the edit page as well as any page that embeds the calculator using the shortcode), as well as the Text Preview field of a Project (injected on the edit project page)

References

wpscan.com/vulnerability/f0915b66-0b99-4aeb-9fba-759cafaeb0cb · Exploit

Altre vulnerabilità di cost calculator

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free