CVE-2021-24632: Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting
Published Sep 27, 2021
·Updated
The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue
Affected Software
1 affected component
WPZOOM Recipe Card Blocks For Gutenberg \& Elementor Wordpress<2.8.1
Event History
Sep 27, 2021
CVE Published
via MITRE·03:25 PM
Data Sourced
via MITRE·03:25 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-24632?
CVE-2021-24632 has a medium severity rating due to its potential for reflected cross-site scripting attacks.
2
How do I fix CVE-2021-24632?
To fix CVE-2021-24632, update the Recipe Card Blocks by WPZOOM plugin to version 2.8.1 or later.
3
What type of attack is associated with CVE-2021-24632?
CVE-2021-24632 is associated with reflected cross-site scripting (XSS) attacks.
4
Who is affected by CVE-2021-24632?
Anyone using Recipe Card Blocks by WPZOOM plugin versions prior to 2.8.1 on WordPress sites is affected by CVE-2021-24632.
5
What does CVE-2021-24632 exploit?
CVE-2021-24632 exploits a failure to properly escape the message parameter in the admin dashboard, allowing XSS.