CVE-2021-24577: Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS
First published: Mon Oct 11 2021(Updated: )
The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.
Credit: contact@wpscan.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Wpdevart Coming Soon And Maintenance Mode | <3.5.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2021-24577.
What is the severity level of CVE-2021-24577?
The severity level of CVE-2021-24577 is medium.
What is the affected software of CVE-2021-24577?
The affected software of CVE-2021-24577 is the Coming soon and Maintenance mode WordPress plugin before version 3.5.3.
What is the vulnerability description for CVE-2021-24577?
CVE-2021-24577 is a vulnerability in the Coming soon and Maintenance mode WordPress plugin before version 3.5.3 that allows authenticated users to submit unproperly sanitized inputs, leading to stored cross-site scripting (XSS).
Is there a fix available for CVE-2021-24577?
Yes, updating the Coming soon and Maintenance mode WordPress plugin to version 3.5.3 or newer fixes CVE-2021-24577.
- collector/nvd-index
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- vendor/wpdevart
- canonical/wpdevart coming soon and maintenance mode