Blue Admin <= 21.06.01 - CSRF to Stored Cross-Site Scripting (XSS)
Vulnerability Description
The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its settings, allowing the issue to be exploited via a CSRF attack.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-24581
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- ABISHEIK M
More from Unknown
View All →Affected Vendor
Unknown
View all reports →