VULNERABILITY INTELLIGENCE
CVE-2021-24287
CVSS score6.1 MEDIUM
EPSS probability10.36%
CISA KEVNot currently listed
Published2021-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Description
The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue
Weakness classification
- contact@wpscan.com: CWE-79
Primary references
- contact@wpscan.com — Exploit, Third Party Advisory, VDB Entry
- contact@wpscan.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory