MEDIUM🇵🇱 Wersja polska

CVE-2021-24389

CVSS 6.1v3.1pub. 2021-07-06upd. 2024-11-21

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

  • Chimpgroup Foodbakery

    APP
    Chimpgroup
    < 2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2025-32927CRITICAL9.8PL ✓ten sam produkt

PHP Object Injection w pluginie WordPress FoodBakery (do wersji 3.3)

CVE-2024-11284CRITICAL9.8PL ✓ten sam vendor

WP JobHunt: nieuwierzytelnione przejęcie konta i privilege escalation

CVE-2024-11285CRITICAL9.8PL ✓ten sam vendor

WP JobHunt dla WordPress – przejęcie konta przez zmianę adresu e-mail

CVE-2024-11286CRITICAL9.8PL ✓ten sam vendor

Authentication bypass w WP JobHunt – przejęcie konta administratora

CVE-2022-0316CRITICAL9.8ten sam vendor

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordP...