PT-2022-10598

CVE-2021-36901

Published

2022-06-15

Updated

2022-06-23

Description by

CVSS 3.1

6.1

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Phil Baker's Age Gate plugin versions prior to 2.18.0

Description The issue is related to an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. This means that an attacker can inject malicious scripts into the website without needing authentication, and these scripts will be stored and executed when other users access the site.

Recommendations For versions prior to 2.18.0, update to version 2.18.0 or later to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Nguyen Van

Nguyen Van Khanh

Vendors

Affected products

Weakness enumeration

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')