CVE Feed

    Dashboard / CVE / CVE-2021-24387

    CVE-2021-24387

    The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ct_community parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context

    Published:Jul 6, 2021
    Last Modified:Nov 21, 2024
    EPS:Jul 6, 2021
    EPSS Score:0.42184
    CVSS Score:6.1

    Affected Products

    Vendor
    Contempothemes
    Product
    Real Estate 7

    Exploits

    https://wpscan.com/vulnerability/27264f30-71d5-4d2b-8f36-4009a2be6745https://wpscan.com/vulnerability/27264f30-71d5-4d2b-8f36-4009a2be6745

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High