CVE-2021-24693: fallo en Simple Download Monitor
Simple Download Monitor < 3.9.5 - Contributor+ Stored Cross-Site Scripting via File Thumbnail
Publicada el · Actualizada el
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 1.3%
probabilidad de explotación
1.3%top 31% de las CVE
explotación observada
noninguna fuente lo reporta
The Simple Download Monitor WordPress plugin before 3.9.5 does not escape the "File Thumbnail" post meta before outputting it in some pages, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks. Given the that XSS is triggered even when the Download is in a review state, contributor could make JavaScript code execute in a context of a reviewer such as admin and make them create a rogue admin account, or install a malicious plugin
Productos afectados
Unknown · Simple Download MonitorCVEs relacionadas — Simple Download Monitor
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-24695—Simple Download Monitor < 3.9.6 - Unauthenticated Log AccessEPSS 1.7%CVE-2021-24692—Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path TraversalEPSS 1.4%CVE-2021-24697—Simple Download Monitor < 3.9.5 - Reflected Cross-Site ScriptingEPSS 0.8%CVE-2021-24698—Simple Download Monitor < 3.9.6 - Arbitrary Thumbnails RemovalEPSS 0.7%CVE-2021-24696—Simple Download Monitor < 3.9.9 - Multiple CSRFEPSS 0.6%CVE-2021-24694—Simple Download Monitor < 3.9.11 - Contributor+ Stored Cross-Site Scripting via ShortcodesEPSS 0.6%