CVE-2021-24335CWE-79

CVE-2021-24335: fallo en Car Repair Services & Auto Mechanic

Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS

Publicada el · Actualizada el

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 3.9%
The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue