Medium severity5.4NVD Advisory· Published Jul 12, 2021· Updated Jun 17, 2026
CVE-2021-24365
CVE-2021-24365
Description
The Admin Columns WordPress plugin Free before 4.3.2 and Pro before 5.5.2 allowed to configure individual columns for tables. Each column had a type. The type "Custom Field" allowed to choose an arbitrary database column to display in the table. There was no escaping applied to the contents of "Custom Field" columns.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <4.3.2 (Free) / <5.5.2 (Pro)
- Range: 4.3.2
Patches
Vulnerability mechanics
References
2- wpscan.com/vulnerability/fdbeb137-b404-46c7-85fb-394a3bdac388nvdExploitThird Party Advisory
- www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-032.txtnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.