VULNERABILITY INTELLIGENCE

CVE-2021-24658

CVSS score4.8 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2021-08-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

The Erident Custom Login and Dashboard WordPress plugin before 3.5.9 did not properly sanitise its settings, allowing high privilege users to use XSS payloads in them (even when the unfileted_html is disabled)

Weakness classification

  • contact@wpscan.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references