Vulnerability Details CVE-2021-24682
The Cool Tag Cloud WordPress plugin before 2.26 does not escape the style attribute of the cool_tag_cloud shortcode, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.1%
CVSS Severity
CVSS v3 Score 5.4
CVSS v2 Score 3.5
References
Products affected by CVE-2021-24682
-
cpe:2.3:a:wpkube:cool_tag_cloud:-
-
cpe:2.3:a:wpkube:cool_tag_cloud:1.00
-
cpe:2.3:a:wpkube:cool_tag_cloud:1.01
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.00
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.01
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.02
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.03
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.04
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.05
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.06
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.07
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.08
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.09
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.10
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.11
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.12
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.13
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.14
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.15
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.16
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.17
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.18
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.19
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.20
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.21
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.22
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.23
-
cpe:2.3:a:wpkube:cool_tag_cloud:2.25