CVE-2021-24446: vulnerability in Remove Footer Credit
Remove Footer Credit < 1.0.6 - CSRF to Stored Cross-Site Scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.3%
The Remove Footer Credit WordPress plugin before 1.0.6 does not have CSRF check in place when saving its settings, which could allow attacker to make logged in admins change them and lead to Stored XSS issue as well due to the lack of sanitisation
Affected products
Unknown · Remove Footer CreditRelated CVEs — Remove Footer Credit
In the same product, most dangerous first.