Vulnerabilities > CVE-2021-24482 - Unspecified vulnerability in Never5 Related Posts

047910
CVSS 4.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
never5
NVD
Published: 2021-07-19
Updated: 2024-11-21

Summary

The Related Posts for WordPress plugin through 2.0.4 does not sanitise its heading_text and CSS settings, allowing high privilege users (admin) to set XSS payloads in them, leading to Stored Cross-Site Scripting issues.

Vulnerable Configurations

Part Description Count
Application
Never5
34

References