CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects WordPress, Java. Public exploit code or proof-of-concept references have been detected in its references.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
External Security References
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2021-24610
Severity
MEDIUM
CVSS
4.8
EPSS
5.43%
WordPress Java
Original NVD Description
The TranslatePress WordPress plugin before 2.0.9 does not implement a proper sanitisation on the translated strings. The 'trp_sanitize_string' function only removes script tag with a regex, still allowing other HTML tags and attributes to execute javascript, which could lead to authenticated Stored Cross-Site Scripting issues.
Related CVEs
Other vulnerabilities affecting the same vendor(s)