CVE-2021-24411CWE-352CWE-79
Social Tape <= 1.0 - CSRF to Stored XSS
published August 16, 2021
What it is
The Social Tape WordPress plugin through 1.0 does not have CSRF checks in place when saving its settings, and do not sanitise or escape them before outputting them back in the page, leading to a stored Cross-Site Scripting issue via a CSRF attack
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00412 · 34.4th percentile
- Weaknesses
- CWE-352 · Cross-Site Request Forgery (CSRF); CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- Published
- 2021-08-16T10:48Z
EPSS history
Timeline