Home

CVE-2021-24489

Description

The Request a Quote WordPress plugin before 2.3.9 does not sanitise, validate or escape some of its settings in the admin dashboard, leading to authenticated Stored Cross-Site Scripting issues even when the unfiltered_html capability is disallowed.

Risk Information

Base Score
4.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.287

Associated Vulnerability

VulnerabilityOS Platform
Processor microcode for Intel CPUs (USN-4985-1) intel-microcode_3.20210608.0ubuntu0.18.04.1_i386.debLinux
Processor microcode for Intel CPUs (USN-4985-1) intel-microcode_3.20210608.0ubuntu0.18.04.1_amd64.debLinux
Processor microcode for Intel CPUs (USN-4985-1) intel-microcode_3.20210608.0ubuntu0.20.04.1_amd64.debLinux
Processor microcode for Intel CPUs (USN-4985-1) intel-microcode_3.20210608.0ubuntu0.20.10.1_amd64.debLinux
Processor microcode for Intel CPUs (USN-4985-1) intel-microcode_3.20210608.0ubuntu0.21.04.1_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234