Description

A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course "Title" and "Content" fields.

Remediation

References

CVE-2021-35415

Related Vulnerabilities

WordPress Plugin Meta Slider and Carousel with Lightbox Cross-Site Request Forgery (1.6.2)

Oracle Database Server CVE-2007-5520 Vulnerability (CVE-2007-5520)

MySQL CVE-2018-3079 Vulnerability (CVE-2018-3079)

WordPress Plugin WP Construction Mode Cross-Site Request Forgery (3.31)

WordPress Plugin Display Widgets Spam Links Injection (2.6.3.1)

Severity

Medium

Classification

CVE-2021-35415 CWE-707

Tags

Missing Update Known Vulnerabilities