CVE-2021-24332: falha em Autoptimize
Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.6%
probabilidade de exploração
0.6%top 52% das CVEs
exploração observada
nãonenhuma fonte reporta
The Autoptimize WordPress plugin before 2.8.4 was missing proper escaping and sanitisation in some of its settings, allowing high privilege users to set XSS payloads in them, leading to stored Cross-Site Scripting issues
Produtos afetados
Unknown · AutoptimizeCVEs relacionadas — Autoptimize
No mesmo produto, das mais perigosas para as menos.
CVE-2021-24376—Autoptimize < 2.7.8 - Arbitrary File Upload via "Import Settings"EPSS 3.7%CVE-2022-4057MEDIUMAutoptimize < 3.1.0 - Sensitive Data DisclosureEPSS 1.5%CVE-2021-24377—Autoptimize < 2.7.8 - Race Condition leading to RCEEPSS 1.2%CVE-2022-2635—Autoptimize < 3.1.1 - Admin+ Stored Cross Site ScriptingEPSS 0.6%CVE-2021-24378—Autoptimize < 2.7.8 - Authenticated Stored XSS via File UploadEPSS 0.6%CVE-2023-2113MEDIUMAutoptimize < 3.1.7 - Admin+ Stored Cross-Site Scripting via Settings ImportEPSS 0.5%