CVE-2021-24743

Podcast Subscribe Buttons < 1.4.2 - Contributor+ Stored XSS

The Podcast Subscribe Buttons WordPress plugin before 1.4.2 allows users with any role capable of editing or adding posts to perform stored XSS.

Affected

Podcast Subscribe Buttons

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0 NVD

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.62% chance of exploitation in the next 30 days, 49th percentile

Published

2021-10-18

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/998395f0-f176-45b9-baf7-b50d30538c7d

References

• CVE Record
• NVD entry