Vulnerabilities > CVE-2021-24335 - Unspecified vulnerability in Smartdatasoft CAR Repair Services & Auto Mechanic

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
smartdatasoft
NVD
Published: 2021-06-01
Updated: 2024-11-21

Summary

The Car Repair Services & Auto Mechanic WordPress theme before 4.0 did not properly sanitise its serviceestimatekey search parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting issue

Vulnerable Configurations

Part Description Count
Application
Smartdatasoft
1

References