Vulnerabilities > CVE-2021-24245 - Unspecified vulnerability in Trumani Stop Spammers

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
trumani
NVD
Published: 2021-05-06
Updated: 2024-11-21

Summary

The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue.

Vulnerable Configurations

Part Description Count
Application
Trumani
29

References