CVE-2021-24287: Select All Categories and Taxonomies < 1.3.2 - Reflected Cross-Site Scripting (XSS)
Published May 14, 2021
·Updated
The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue
Affected Software
1 affected component
Mooveagency Select All Categories And Taxonomies\, Change Checkbox To Radio Buttons Wordpress<1.3.2
Event History
May 14, 2021
CVE Published
via MITRE·11:38 AM
Data Sourced
via MITRE·11:38 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-24287.
2
What is the severity of CVE-2021-24287?
The severity of CVE-2021-24287 is medium with a CVSS score of 6.1.
3
What is the affected software?
The affected software is the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before version 1.3.2.
4
What is the CWE number for this vulnerability?
The CWE number for this vulnerability is CWE-79.
5
How can I fix CVE-2021-24287?
To fix CVE-2021-24287, update the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin to version 1.3.2 or later.