Unscored CVE-2021-20746 EUVD-2021-8160GHSA-pmfx-m292-fc24

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitra…

Published Jun 28, 2021 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Hector Cabrera Product: WordPress Popular Posts Category: Web / CMS

Description

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Hector Cabrera	WordPress Popular Posts	5.3.2 and earlier	—

References

https://wordpress.org/plugins/wordpress-popular-posts/
https://cabrerahector.com/wordpress/wordpress-popular-posts-5-3-improved-php-8-support-retina-display-support-and-more/#minor-updates-and-hotfixes
https://cabrerahector.com/
https://jvn.jp/en/jp/JVN63066062/index.html