medium4.8
CVE-2021-36896
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2
Impact
Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Pricing Table (WordPress plugin) versions <= 1.5.2
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| W3eden | Pricing Table | through 1.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://patchstack.com/database/vulnerability/pricing-table/wordpress-pricing-table-plugin-1-5-2-authenticated-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/pricing-table/#developers
- https://patchstack.com/database/vulnerability/pricing-table/wordpress-pricing-table-plugin-1-5-2-authenticated-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/pricing-table/#developers