CVE-2021-24719: Enfold Theme < 4.8.4 - Reflected Cross-Site Scripting (XSS)
Published Oct 11, 2021
·Updated
The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder.
Affected Software
1 affected component
Kriesi Enfold Wordpress<4.8.4
Event History
Oct 11, 2021
CVE Published
via MITRE·10:45 AM
Data Sourced
via MITRE·10:45 AM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2021-24719?
CVE-2021-24719 is a vulnerability in the Enfold WordPress theme before version 4.8.4 that allows for Reflected Cross-Site Scripting (XSS) attacks.
2
How does CVE-2021-24719 affect Enfold?
CVE-2021-24719 affects Enfold versions prior to 4.8.4 which use Avia Page Builder.
3
What is the severity of CVE-2021-24719?
The severity of CVE-2021-24719 is medium with a CVSS score of 6.1.
4
How can I fix CVE-2021-24719?
To fix CVE-2021-24719, update your Enfold WordPress theme to version 4.8.4 or higher.
5
Where can I find more information about CVE-2021-24719?
You can find more information about CVE-2021-24719 at the following references: [1] [2]