Read the docs

Blue-admin Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Blue-admin Project records in CISA KEV

No Blue-admin Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blue-admin 1 record MEDIUM

Records

1 record in Blue-admin · all components

TI-2021-06865 CVE-2021-24581 · GHSA-mqfw-gg2g-9qc5

Blue Admin <= 21.06.01 - CSRF to Stored Cross-Site Scripting (XSS)

Priority MEDIUM 45

The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04087 Published 2021-08-30 No fix listed CWE-352
Open these records in search →