CVE-2021-24525

The Shortcodes Ultimate WordPress plugin before 5.10.2 allows users with Contributor roles to perform stored XSS via shortcode attributes. Note: the plugin is inconsistent in its handling of shortcode attributes; some do escape, most don't, and there are even some attributes that are insecure by design (like [su_button]'s onclick attribute).

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.62% chance of exploitation in the next 30 days, 48th percentile

Published

2021-09-20

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/7f5659bd-50c3-4725-95f4-cf88812acf1c

References

• CVE Record
• NVD entry

Related

• CVE-2021-24524
• CVE-2021-24526
• CVE-2021-24523
• CVE-2021-24527
• CVE-2021-24522
• CVE-2021-24528