CVE-2021-24607

PoC —

CVSS 3.1

4.8 medium

EPSS

<1%p48

Published

Nov 8, 2021 (Nov 8, 2021)

Modified

Jun 17, 2026

Description

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed.

Vendors: wooassist
Products: storefront footer text
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.