Vulnerability Details CVE-2021-36896
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.3%
CVSS Severity
CVSS v3 Score 4.8
CVSS v2 Score 3.5
References
- https://patchstack.com/database/vulnerability/pricing-table/wordpress-pricing-table-plugin-1-5-2-authenticated-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/pricing-table/#developers
- https://patchstack.com/database/vulnerability/pricing-table/wordpress-pricing-table-plugin-1-5-2-authenticated-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/pricing-table/#developers
Products affected by CVE-2021-36896
-
cpe:2.3:a:w3eden:pricing_table:-
-
cpe:2.3:a:w3eden:pricing_table:1.5.2