← back
CVE-2021-24211

WordPress Related Posts <= 3.6.4 - Authenticated Stored Cross-Site Scripting (XSS)

EPSS 0.6%CWE-79
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →