Description (CNA)
The Pods – Custom Content Types and Fields WordPress plugin before 2.7.27 was vulnerable to an Authenticated Stored Cross-Site Scripting (XSS) security vulnerability within the 'Menu Label' field parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Pods Framework Team / Pods – Custom Content Types and Fields | affected 2.4.4.1 before 2.4.4.1*; affected 2.7.27 before 2.7.27 |
CWE
CWE-79
References
- https://wpscan.com/vulnerability/8e72236d-f620-4503-a324-dcf49405351b
- https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-24339
ADP enrichment
No English description supplied.