← volver
CVE-2021-24335CWE-79

Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS

18Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 3.9%
probabilidad de explotación
3.9%top 11% de las CVE
explotación observada
noninguna fuente lo reporta
The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue