CVE-2021-24632CWE-79

CVE-2021-24632: vulnerability in Recipe Card Blocks by WPZOOM

Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.8%
The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
Related CVEs — Recipe Card Blocks by WPZOOM

In the same product, most dangerous first.