Skip to content
OpenAdvisories
Unscored CVE-2021-24577 EUVD-2021-11489GHSA-32hf-ffvm-wx32

Coming Soon and Maintenance Mode < 3.5.3 - Authenticated Stored XSS

Published Oct 11, 2021 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Coming soon and Maintenance mode WordPress plugin before 3.5.3 does not properly sanitize inputs submitted by authenticated users when setting adding or modifying coming soon or maintenance mode pages, leading to stored XSS.

Affected products

VendorProductAffectedFixed
— Coming soon and Maintenance mode 3.5.3 – < 3.5.3 3.5.3

References