CVE-2021-24428

MEDIUM · CVSS 4.8 EPSS 0.55%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-08-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-24428

Severity

MEDIUM

CVSS

4.8

EPSS

0.55%

WordPress

Original NVD Description

The RSS for Yandex Turbo WordPress plugin through 1.30 does not sanitise or escape some of its settings before saving and outputing them in the admin dashboard, leading to an Authenticated Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed.