Vulnerabilities > CVE-2021-24431 - Unspecified vulnerability in Language BAR Flags Project Language BAR Flags

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

language-bar-flags-project

NVD

Published: 2021-09-13

Updated: 2024-11-21

Summary

The Language Bar Flags WordPress plugin through 1.0.8 does not have any CSRF in place when saving its settings and did not sanitise or escape them when generating the flag bar in the frontend. This could allow attackers to make a logged in admin change the settings, and set Cross-Site Scripting payload in them, which will be executed in the frontend for all users

Vulnerable Configurations

Part	Description	Count
Application	Language_Bar_Flags_Project Language BAR Flags Project Language BAR Flags - Language BAR Flags Project Language BAR Flags 1.0.0 Language BAR Flags Project Language BAR Flags 1.0.1 Language BAR Flags Project Language BAR Flags 1.0.2 Language BAR Flags Project Language BAR Flags 1.0.3 Language BAR Flags Project Language BAR Flags 1.0.4 Language BAR Flags Project Language BAR Flags 1.0.5 Language BAR Flags Project Language BAR Flags 1.0.6 Language BAR Flags Project Language BAR Flags 1.0.7 Language BAR Flags Project Language BAR Flags 1.0.8	10

Summary

Vulnerable Configurations

References