CVE-2021-24489: falha em Request a Quote
Request a Quote < 2.3.9 - Admin+ Stored Cross-Site Scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 0.6%
The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.
Produtos afetados
Unknown · Request a QuoteCVEs relacionadas — Request a Quote
No mesmo produto, das mais perigosas para as menos.
CVE-2022-2240—Request a Quote <= 2.3.7 - CSV InjectionEPSS 1.4%CVE-2022-2239—Request a Quote < 2.3.9 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2021-24420—Request a Quote < 2.3.4 - Authenticated Stored XSSEPSS 0.6%CVE-2024-6231MEDIUMRequest a Quote < 2.4.1 - Admin+ Stored XSSEPSS 0.4%CVE-2026-90988MEDIUMRequest a Quote <= 2.5.6 - Unauthenticated Quote Request Contact Record Disclosure via emd_get_std_pagenumEPSS 0.2%