CVE-2021-24338

    Dashboard / Vulnerabilities / CVE-2021-24338

    CVE-2021-24338

    Published: 21 Jun 2021Last Modified: 9 Jul 2026

    Summary:

    Details: The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Singular Label' field parameter.

    References: https://wpscan.com/vulnerability/d5b015f3-90c7-4d51-a71d-630d60965151, https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24338

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -aa822df7e6201d8dbda701216d94848f6d4ae746

    Affected versions

    2.7.26
    2.7.25
    2.7.24
    2.7.23
    2.7.22
    2.7.21
    2.7.20.1
    2.7.20
    2.7.18
    2.7.17.1
    2.7.17
    2.7.16.2
    2.7.16.1
    2.7.15
    2.7.14
    2.7.13
    2.7.12
    2.7.11
    2.7.10
    2.7.9
    2.7.8
    2.7.7
    2.7.6
    2.7.5
    2.7.4
    2.7.3
    2.7.2.1
    2.7.2
    2.7.1
    2.7.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-24338 | CVE-DB