VULNERABILITY INTELLIGENCE

CVE-2021-24870

CVSS score6.1 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The WP Fastest Cache WordPress plugin before 0.9.5 is lacking a CSRF check in its wpfc_save_cdn_integration AJAX action, and does not sanitise and escape some the options available via the action, which could allow attackers to make logged in high privilege users call it and set a Cross-Site Scripting payload

Weakness classification

  • nvd@nist.gov: CWE-352

Primary references