Description (CNA)
The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Singular Label' field parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Pods Framework Team / Pods – Custom Content Types and Fields | affected 2.4.4.1 before 2.4.4.1*; affected 2.7.27 before 2.7.27 |
CWE
CWE-79
References
- https://wpscan.com/vulnerability/d5b015f3-90c7-4d51-a71d-630d60965151
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24338
ADP enrichment
No English description supplied.