CVE-2021-24545: XSS
First published: Mon Oct 11 2021(Updated: )
Credit: contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wp Html Author Bio Project Wp Html Author Bio | <=1.2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for the WP HTML Author Bio plugin?
The vulnerability ID for the WP HTML Author Bio plugin is CVE-2021-24545.
What is the severity rating of CVE-2021-24545?
CVE-2021-24545 has a severity rating of medium (5.4).
What software versions are affected by CVE-2021-24545?
Versions up to and including 1.2.0 of the WP HTML Author Bio plugin are affected by CVE-2021-24545.
How does CVE-2021-24545 impact users?
CVE-2021-24545 allows users to use malicious JavaScript code in the Bio section of their profile, which can be executed when anyone visits a post in the frontend made by that user.
Is there a fix available for CVE-2021-24545?
At the moment, there is no known fix available for CVE-2021-24545. It is recommended to disable or remove the WP HTML Author Bio plugin until a patch is released.
- collector/nvd-index
- vendor/wp html author bio project
- canonical/wp html author bio project wp html author bio
- version/wp html author bio project wp html author bio/1.2.0