CVE-2021-24446 in Remove Footer Credit Plugininfo

Zusammenfassung

von MITRE • 14.02.2022

The Remove Footer Credit WordPress plugin before 1.0.6 does not have CSRF check in place when saving its settings, which could allow attacker to make logged in admins change them and lead to Stored XSS issue as well due to the lack of sanitisation

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

14.01.2021

Veröffentlichung

14.02.2022

Moderieren

akzeptiert

Eintrag

VDB-193031

CPE

bereit

EPSS

0.00329

KEV

nein

Aktivitäten

very low

Sektor

Hostingprovider

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2021-24446
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2021-24446
CVE Detailshttps://www.cvedetails.com/cve/CVE-2021-24446/

◂ ZurückÜbersichtWeiter ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!