CVE-2021-24985: falha em Easy Forms for Mailchimp
Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting
Publicada em · Atualizada em
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 1.1%
probabilidade de exploração
1.1%top 35% das CVEs
exploração observada
nãonenhuma fonte reporta
The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
Produtos afetados
Unknown · Easy Forms for MailchimpCVEs relacionadas — Easy Forms for Mailchimp
No mesmo produto, das mais perigosas para as menos.
CVE-2023-2518MEDIUMEasy Forms for Mailchimp < 6.8.9 - Reflected XSSEPSS 1.1%CVE-2023-1324MEDIUMEasy Forms for MailChimp < 6.8.8 - Reflected XSSEPSS 0.6%CVE-2023-1325MEDIUMEasy Forms for MailChimp < 6.8.7 - Contributor+ Stored XSSEPSS 0.5%CVE-2023-1323MEDIUMEasy Forms for MailChimp < 6.8.9 - Admin+ Stored XSSEPSS 0.4%CVE-2023-4925MEDIUMEasy Forms for Mailchimp <= 6.8.10 - Admin+ Stored Cross-Site ScriptingEPSS 0.4%