Vulnerabilities > CVE-2021-39340 - Unspecified vulnerability in Bracketspace Notification

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

bracketspace

NVD

Published: 2021-11-01

Updated: 2024-11-21

Summary

The Notification WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/src/classes/Utils/Settings.php file which made it possible for attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 7.2.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.

Vulnerable Configurations

Part	Description	Count
Application	Bracketspace Bracketspace Notification - Bracketspace Notification 1.1.2 Bracketspace Notification 1.2 Bracketspace Notification 1.3 Bracketspace Notification 1.3.1 Bracketspace Notification 1.4 Bracketspace Notification 2.0 Bracketspace Notification 2.0.1 Bracketspace Notification 2.1 Bracketspace Notification 2.2 Bracketspace Notification 2.3 Bracketspace Notification 2.3.1 Bracketspace Notification 2.4 Bracketspace Notification 3.0 Bracketspace Notification 3.1 Bracketspace Notification 3.1.1 Bracketspace Notification 3.2.0 Bracketspace Notification 5.0.0 Bracketspace Notification 5.1.0 Bracketspace Notification 5.1.1 Bracketspace Notification 5.1.2 Bracketspace Notification 5.1.3 Bracketspace Notification 5.1.4 Bracketspace Notification 5.1.5 Bracketspace Notification 5.1.6 Bracketspace Notification 5.1.7 Bracketspace Notification 5.2.0 Bracketspace Notification 5.2.1 Bracketspace Notification 5.2.2 Bracketspace Notification 5.2.3 Bracketspace Notification 5.2.4 Bracketspace Notification 5.3.0 Bracketspace Notification 5.3.1 Bracketspace Notification 5.3.2 Bracketspace Notification 6.0.0 Bracketspace Notification 6.0.1 Bracketspace Notification 6.0.2 Bracketspace Notification 6.0.3 Bracketspace Notification 6.0.4 Bracketspace Notification 6.1.0 Bracketspace Notification 6.1.1 Bracketspace Notification 6.1.2 Bracketspace Notification 6.1.3 Bracketspace Notification 6.1.4 Bracketspace Notification 6.1.5 Bracketspace Notification 6.1.6 Bracketspace Notification 6.2.0 Bracketspace Notification 6.3.0 Bracketspace Notification 6.3.1 Bracketspace Notification 6.3.2 Bracketspace Notification 7.0.0 Bracketspace Notification 7.0.1 Bracketspace Notification 7.0.2 Bracketspace Notification 7.0.3 Bracketspace Notification 7.0.4 Bracketspace Notification 7.1.0 Bracketspace Notification 7.1.1 Bracketspace Notification 7.2.0 Bracketspace Notification 7.2.1 Bracketspace Notification 7.2.2 Bracketspace Notification 7.2.3 Bracketspace Notification 7.2.4	62

Summary

Vulnerable Configurations

References