medium6.1
CVE-2021-38338
The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `f` and `t` parameter found in the ~/titan-framework/iframe-goo…
Impact
The Border Loading Bar WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `f` and `t` parameter found in the ~/titan-framework/iframe-googlefont-preview.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Border Loading Bar Project | Border Loading Bar | through 1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://plugins.trac.wordpress.org/browser/border-loading-bar/trunk/titan-framework/iframe-googlefont-preview.php#L39
- https://www.wordfence.com/vulnerability-advisories/#CVE-2021-38338
- https://plugins.trac.wordpress.org/browser/border-loading-bar/trunk/titan-framework/iframe-googlefont-preview.php#L39
- https://www.wordfence.com/vulnerability-advisories/#CVE-2021-38338