• caglararli@hotmail.com
  • 05386281520

CVE-2021-24432 | Advanced AJAX Product Filters Plugin prior 1.5.4.7 on WordPress POST Parameter term_id cross site scripting

Çağlar Arlı      -    20 Views

CVE-2021-24432 | Advanced AJAX Product Filters Plugin prior 1.5.4.7 on WordPress POST Parameter term_id cross site scripting

A vulnerability was found in Advanced AJAX Product Filters Plugin on WordPress. It has been classified as problematic. Affected is an unknown function of the component POST Parameter Handler. The manipulation of the argument term_id leads to cross site scripting. This vulnerability is traded as CVE-2021-24432. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.