CVE-2021-24984: WPFront User Role Editor < 3.2.1.11184 - Reflected Cross-Site Scripting
Published Dec 27, 2021
·Updated
The WPFront User Role Editor WordPress plugin before 3.2.1.11184 does not sanitise and escape the changes-saved parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting
Affected Software
1 affected component
WPFront WPFront User Role Editor WordPress<3.2.1.11184
Event History
Dec 27, 2021
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-24984?
CVE-2021-24984 has a medium severity rating due to its potential for reflected cross-site scripting attacks.
2
How do I fix CVE-2021-24984?
To fix CVE-2021-24984, you should update the WPFront User Role Editor plugin to version 3.2.1.11184 or later.
3
What type of vulnerability is CVE-2021-24984?
CVE-2021-24984 is a Reflected Cross-Site Scripting (XSS) vulnerability.
4
What versions are affected by CVE-2021-24984?
CVE-2021-24984 affects WPFront User Role Editor plugin versions prior to 3.2.1.11184.
5
Where can I find more information about CVE-2021-24984?
More information about CVE-2021-24984 can typically be found in security advisories or vulnerability databases.