Skip to content
OpenAdvisories
Unscored CVE-2021-24339 EUVD-2021-11252GHSA-38hf-3vg9-9h45

Pods < 2.7.27 - Authenticated Stored Cross-Site Scripting (XSS)

Published Jun 21, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Vendor: Pods Framework Team Product: Pods – Custom Content Types and Fields Category: Web / CMS

Description

The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Menu Label' field parameter.

Affected products

VendorProductAffectedFixed
Pods Framework Team Pods – Custom Content Types and Fields 2.4.4.1 – < 2.4.4.1*, 2.7.27 – < 2.7.27 2.4.4.1*

References