Vulnerabilities > CVE-2021-24922 - Unspecified vulnerability in Fatcatapps Pixel CAT

CVSS 9.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

fatcatapps

critical

NVD

Published: 2021-12-13

Updated: 2024-11-21

Summary

The Pixel Cat WordPress plugin before 2.6.2 does not have CSRF check when saving its settings, and did not sanitise as well as escape some of them, which could allow attacker to make a logged in admin change them and perform Cross-Site Scripting attacks

Vulnerable Configurations

Part	Description	Count
Application	Fatcatapps Fatcatapps Pixel CAT - Fatcatapps Pixel CAT 1.0.0 Fatcatapps Pixel CAT 1.1.0 Fatcatapps Pixel CAT 1.2.0 Fatcatapps Pixel CAT 1.3.0 Fatcatapps Pixel CAT 1.3.1 Fatcatapps Pixel CAT 1.3.2 Fatcatapps Pixel CAT 1.3.3 Fatcatapps Pixel CAT 1.3.4 Fatcatapps Pixel CAT 2.0.0 Fatcatapps Pixel CAT 2.0.1 Fatcatapps Pixel CAT 2.1.0 Fatcatapps Pixel CAT 2.2.0 Fatcatapps Pixel CAT 2.2.1 Fatcatapps Pixel CAT 2.2.2 Fatcatapps Pixel CAT 2.2.3 Fatcatapps Pixel CAT 2.3.0 Fatcatapps Pixel CAT 2.3.1 Fatcatapps Pixel CAT 2.4.0 Fatcatapps Pixel CAT 2.5.0 Fatcatapps Pixel CAT 2.5.1 Fatcatapps Pixel CAT 2.5.2 Fatcatapps Pixel CAT 2.5.3 Fatcatapps Pixel CAT 2.5.4 Fatcatapps Pixel CAT 2.5.5 Fatcatapps Pixel CAT 2.5.6 Fatcatapps Pixel CAT 2.6.0 Fatcatapps Pixel CAT 2.6.1	28

Summary

Vulnerable Configurations

References