CVE-2021-24335: vulnerability in Car Repair Services & Auto Mechanic
Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 3.9%
The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue
Affected products
Unknown · Car Repair Services & Auto Mechanic