Vulnerabilities > CVE-2021-24332 - Unspecified vulnerability in Autoptimize
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The Autoptimize WordPress plugin before 2.8.4 was missing proper escaping and sanitisation in some of its settings, allowing high privilege users to set XSS payloads in them, leading to stored Cross-Site Scripting issues
Vulnerable Configurations
References
- https://m0ze.ru/vulnerability/%5B2021-04-01%5D-%5BWordPress%5D-%5BCWE-79%5D-Autoptimize-WordPress-Plugin-v2.8.3.txt
- https://m0ze.ru/vulnerability/%5B2021-04-01%5D-%5BWordPress%5D-%5BCWE-79%5D-Autoptimize-WordPress-Plugin-v2.8.3.txt
- https://wpscan.com/vulnerability/6678e064-ce21-4bb2-8c50-061073fb22fb
- https://wpscan.com/vulnerability/6678e064-ce21-4bb2-8c50-061073fb22fb