CVE-2021-24335CWE-79

CVE-2021-24335: falha em Car Repair Services & Auto Mechanic

Car Repair Services < 4.0 - Unauthenticated Reflected XSS & XFS

Publicada em · Atualizada em

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

18Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 3.9%
The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue