CVE-2021-24333CWE-352

CVE-2021-24333: vulnerability in Content Copy Protection & Prevent Image Save

Content Copy Protection & Prevent Image Save <= 1.3 - CSRF to Stored Cross-Site Scripting (XSS)

Published · Updated

Follow this CVE+ Monitor Content Copy Protection & Prevent Image Save

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.
Affected products
Unknown · Content Copy Protection & Prevent Image Save