CVE-2021-24332CWE-79

Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)

published May 24, 2021

CVSS
—
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

The Autoptimize WordPress plugin before 2.8.4 was missing proper escaping and sanitisation in some of its settings, allowing high privilege users to set XSS payloads in them, leading to stored Cross-Site Scripting issues

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00626 · 49.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-05-24T10:58Z
EPSS history
Timeline
  • 24 MAY 10:58Z
    Autoptimize < 2.8.4 - Authenticated Stored Cross-Site Scripting (XSS)
    cvelistv5