CVE-2021-24985
Easy Forms for Mailchimp < 6.8.6 - Reflected Cross-Site Scripting
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues
El plugin Easy Forms for Mailchimp de WordPress versiones anteriores a 6.8.6, no sanea ni escapa de los parĂ¡metros field_name y field_type antes de devolverlos a los atributos, conllevando a problemas de tipo Cross-Site Scripting Reflejado
*Credits:
JrXnm
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-01-14 CVE Reserved
- 2021-12-21 CVE Published
- 2024-08-03 CVE Updated
- 2024-08-03 First Exploit
- 2024-10-09 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
URL | Tag | Source |
---|
URL | Date | SRC |
---|---|---|
https://wpscan.com/vulnerability/50be0ebf-fe6d-41e5-8af9-0d74f33aeb57 | 2024-08-03 |
URL | Date | SRC |
---|---|---|
https://plugins.trac.wordpress.org/changeset/2646017 | 2022-01-27 |
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Yikesinc Search vendor "Yikesinc" | Easy Forms For Mailchimp Search vendor "Yikesinc" for product "Easy Forms For Mailchimp" | < 6.8.6 Search vendor "Yikesinc" for product "Easy Forms For Mailchimp" and version " < 6.8.6" | wordpress |
Affected
|