~/products/securimage-wp-fixed/securimage-wp-fixed

pipeline liveDigest Docs

Securimage-Wp-Fixed vulnerabilities

1 known vulnerability affecting securimage-wp-fixed/securimage-wp-fixed.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2021-34640P3MEDIUMCVSS 6.1PoC≥ 3.5.4, ≤ 3.5.42021-08-11

CVE-2021-34640 [MEDIUM] CWE-79 CVE-2021-34640: The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 3.5.4.

Securimage-Wp-Fixed vulnerabilities | cvebase