Read the docs

Wp Dialog Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Dialog Project records in CISA KEV

No Wp Dialog Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Dialog 1 record LOW

Records

1 record in Wp Dialog · all components

TI-2021-06883 CVE-2021-24600 · GHSA-7m66-pvc3-h2x4

WP Dialog <= 1.2.5.5 - Authenticated Stored Cross-Site Scripting

Priority LOW 23

The WP Dialog WordPress plugin through 1.2.5.5 does not sanitise and escape some of its settings before outputting them in pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-09-20 No fix listed CWE-79
Open these records in search →