Threat Entry Updated 2024-11-21

CVE-2021-24632 - Recipe Card Blocks By Wpzoom Plugin

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

PLUGIN Recipe Card Blocks By Wpzoom

CVE-2021-24632

MEDIUM CVSS 6.1 2021-09-27

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2021-24634 - Recipe Card Blocks By Wpzoom Plugin

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block (such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings), which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks.

PLUGIN Recipe Card Blocks By Wpzoom

CVE-2021-24634

MEDIUM CVSS 5.4 2021-09-27

Risk Score

Open Full Technical Breakdown