cbcvebase.

Blue-Admin Project Blue-Admin vulnerabilities

1 known vulnerability affecting blue-admin_project/blue-admin.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2021-24581P3HIGHCVSS 8.8PoC≤ 21.06.012021-08-30
CVE-2021-24581 [HIGH] CWE-79 CVE-2021-24581: The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" settin The Blue Admin WordPress plugin through 21.06.01 does not sanitise or escape its "Logo Title" setting before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its settings, allowing the issue to be exploited via a CSRF attack.
nvd
Blue-Admin Project Blue-Admin vulnerabilities | cvebase