CVE-2021-24558CWE-79

Project Status <= 1.6 - Reflected Cross-Site Scripting (XSS)

published August 23, 2021

CVSS
—
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

The pspin_duplicate_post_save_as_new_post function of the Project Status WordPress plugin through 1.6 does not sanitise, validate or escape the post GET parameter passed to it before outputting it in an error message when the related post does not exist, leading to a reflected XSS issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00675 · 51.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-08-23T11:10Z
EPSS history
Timeline
  • 23 AUG 11:10Z
    Project Status <= 1.6 - Reflected Cross-Site Scripting (XSS)
    cvelistv5