CVE-2021-24293

MEDIUM · CVSS 6.1 EPSS 0.87%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-05-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-24293

Severity

MEDIUM

CVSS

6.1

EPSS

0.87%

WordPress Java

Original NVD Description

In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the settings[shipping_address][name] is able to inject malicious javascript.