VULNERABILITY INTELLIGENCE

CVE-2021-24577

CVSS score5.4 MEDIUM
EPSS probability0.62%
CISA KEVNot currently listed
Published2021-10-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.

Weakness classification

  • contact@wpscan.com: CWE-79

Primary references