CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24908

The Check & Log Email WordPress plugin before 1.0.4 does not escape the d parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 43.7%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 2.6

References

Products affected by CVE-2021-24908

Wpchill » Check & Log Email » Version: N/A

cpe:2.3:a:wpchill:check_&_log_email:-
Wpchill » Check & Log Email » Version: 0.5.7

cpe:2.3:a:wpchill:check_&_log_email:0.5.7
Wpchill » Check & Log Email » Version: 0.6.0

cpe:2.3:a:wpchill:check_&_log_email:0.6.0
Wpchill » Check & Log Email » Version: 0.6.1

cpe:2.3:a:wpchill:check_&_log_email:0.6.1
Wpchill » Check & Log Email » Version: 0.6.2

cpe:2.3:a:wpchill:check_&_log_email:0.6.2
Wpchill » Check & Log Email » Version: 1.0.0

cpe:2.3:a:wpchill:check_&_log_email:1.0.0
Wpchill » Check & Log Email » Version: 1.0.1

cpe:2.3:a:wpchill:check_&_log_email:1.0.1
Wpchill » Check & Log Email » Version: 1.0.2

cpe:2.3:a:wpchill:check_&_log_email:1.0.2
Wpchill » Check & Log Email » Version: 1.0.3

cpe:2.3:a:wpchill:check_&_log_email:1.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-24908

Products

Pricing

Contact Us