CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-24617

The GamePress WordPress plugin through 1.1.0 does not escape the op_edit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.7%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

https://wpscan.com/vulnerability/3e262cd7-ca64-4190-8d8c-38b07bbe63e0
https://wpscan.com/vulnerability/3e262cd7-ca64-4190-8d8c-38b07bbe63e0

Products affected by CVE-2021-24617

Gamepress Project » Gamepress » Version: N/A

cpe:2.3:a:gamepress_project:gamepress:-
Gamepress Project » Gamepress » Version: 1.0.0

cpe:2.3:a:gamepress_project:gamepress:1.0.0
Gamepress Project » Gamepress » Version: 1.0.1

cpe:2.3:a:gamepress_project:gamepress:1.0.1
Gamepress Project » Gamepress » Version: 1.0.2

cpe:2.3:a:gamepress_project:gamepress:1.0.2
Gamepress Project » Gamepress » Version: 1.1.0

cpe:2.3:a:gamepress_project:gamepress:1.1.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24617

Products

Pricing

Contact Us