CVE-2021-24522: ProfilePress < 3.1.11 - Unauthenticated Cross-Site Scripting (XSS) in tabbed login/register widget
The User Registration, User Profile, Login & Membership – ProfilePress (Formerly WP User Avatar) WordPress plugin before 3.1.11's widget for tabbed login/register was not properly escaped and could be used in an XSS attack which could lead to wp-admin access. Further, the plugin in several places assigned $POST as $GET which meant that in some cases this could be replicated with just $GET parameters and no need for $POST values.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-24522?
CVE-2021-24522 is a vulnerability in the User Registration, User Profile, Login & Membership – ProfilePress WordPress plugin before 3.1.11's widget for tabbed login/register.
How can CVE-2021-24522 be exploited?
CVE-2021-24522 can be exploited through an XSS attack which could lead to wp-admin access.
What is the severity of CVE-2021-24522?
The severity of CVE-2021-24522 is medium with a CVSS score of 6.1.
What software versions are affected by CVE-2021-24522?
The User Registration, User Profile, Login & Membership – ProfilePress WordPress plugin versions up to and excluding 3.1.11 are affected by CVE-2021-24522.
How can I fix CVE-2021-24522?
To fix CVE-2021-24522, it is recommended to update the User Registration, User Profile, Login & Membership – ProfilePress WordPress plugin to version 3.1.11 or higher.