CVE-2021-24743: Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS
Published Oct 18, 2021
·Updated
The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding posts to perform stored XSS.
Affected Software
1 affected component
SecondLineThemes Podcast Subscribe Buttons Wordpress<1.4.2
Event History
Oct 18, 2021
CVE Published
via MITRE·01:46 PM
Data Sourced
via MITRE·01:46 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2021-24743.
2
What is the severity level of CVE-2021-24743?
The severity level of CVE-2021-24743 is medium.
3
What does CVE-2021-24743 allow attackers to do?
CVE-2021-24743 allows users with any role capable of editing or adding posts to perform stored XSS.
4
Which version of the Podcast Subscribe Buttons WordPress plugin is affected by CVE-2021-24743?
The Podcast Subscribe Buttons WordPress plugin version up to 1.4.2 is affected by CVE-2021-24743.
5
How can I fix CVE-2021-24743?
To fix CVE-2021-24743, update the Podcast Subscribe Buttons WordPress plugin to version 1.4.2 or later.