blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-24211

MEDIUM 5.4 CVSS 3.1
Published
April 5, 2021
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-79
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.

Affected products and versions

  • Unknown WordPress Related Posts — From 3.6.4 (including) to 3.6.4 (including)
  • sovrn wordpress_related_posts — Up to and including 3.6.4

References

  • wpscan.com https://wpscan.com/vulnerability/37e0a033-3dee-476d-ae86-68354e8f0b1c Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record