CVE-2021-36866

概要

参考情報

• patchstack.com/database/vulnerability/easy-pricing-tables/wordpress-easy-pricing-tables-plugin-3-1-2-authenticated-stored-cross-site-scripting-xss-vulnerability · Release Notes
• wordpress.org/plugins/easy-pricing-tables · Release Notes

easy pricing tables のその他の脆弱性

• CVE-2024-8323中 5.4The Pricing Tables WordPress Plugin – Easy Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘fontFam…
• CVE-2022-1904中 6.1The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page…
• CVE-2021-25098中 6.5The Pricing Tables WordPress Plugin WordPress plugin before 3.1.3 does not verify the CSRF nonce when removing posts, allowing attackers to …