CVE-2021-24333
PoC ×2—CVSS 3.1
6.5 medium
EPSS
<1%p55
Published
()
Modified
Description
The Content Copy Protection & Prevent Image Save WordPress plugin through 1.3 does not check for CSRF when saving its settings, not perform any validation and sanitisation on them, allowing attackers to make a logged in administrator set arbitrary XSS payloads in them.
- Vendors
- content copy protection \& prevent image save project
- Products
- content copy protection \& prevent image save
- Ecosystems
- WordPress
- Weakness
- CWE-352, CWE-79
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.