Vulnerabilities > CVE-2021-24233 - Unspecified vulnerability in Boxystudio Cooked
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The Cooked Pro WordPress plugin before 1.7.5.6 was affected by unauthenticated reflected Cross-Site Scripting issues, due to improper sanitisation of user input while being output back in pages as an arbitrary attribute.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- https://wpscan.com/vulnerability/ed620de5-1ad2-4480-b08b-719480472bc0
- https://wpscan.com/vulnerability/ed620de5-1ad2-4480-b08b-719480472bc0
- https://www.getastra.com/blog/911/reflected-xss-found-in-cooked-pro-recipe-plugin-for-wordpress/
- https://www.getastra.com/blog/911/reflected-xss-found-in-cooked-pro-recipe-plugin-for-wordpress/
- https://www.jinsonvarghese.com/reflected-xss-vulnerability-found-in-cooked-pro-plugin/
- https://www.jinsonvarghese.com/reflected-xss-vulnerability-found-in-cooked-pro-plugin/