CVE-2021-24482: Related Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFS
The Related Posts for WordPress plugin through 2.0.4 does not sanitise its headingtext and CSS settings, allowing high privilege users (admin) to set XSS payloads in them, leading to Stored Cross-Site Scripting issues.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-24482?
CVE-2021-24482 is a vulnerability in the Related Posts for WordPress plugin that allows high privilege users to set XSS payloads, leading to Stored Cross-Site Scripting issues.
How does CVE-2021-24482 affect the Related Posts for WordPress plugin?
CVE-2021-24482 affects Related Posts for WordPress plugin versions up to 2.0.4 by allowing admins to set XSS payloads in heading_text and CSS settings.
What is the severity of CVE-2021-24482?
The severity of CVE-2021-24482 is medium with a CVSS v3 base score of 4.8.
How can I fix CVE-2021-24482?
To fix CVE-2021-24482, it is recommended to update the Related Posts for WordPress plugin to version 2.0.5 or later.
Where can I find more information about CVE-2021-24482?
More information about CVE-2021-24482 can be found at the following references: [link 1] [link 2].