Medium severity5.4NVD Advisory· Published Aug 23, 2021· Updated Jun 17, 2026

CVE-2021-24558

Description

The pspin_duplicate_post_save_as_new_post function of the Project Status WordPress plugin through 1.6 does not sanitise, validate or escape the post GET parameter passed to it before outputting it in an error message when the related post does not exist, leading to a reflected XSS issue

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3.7designs/Project Status
cpe:2.3:a:3.7designs:project_status:*:*:*:*:*:wordpress:*:*
Range: <=1.6
WordPress/Project Statusdescription
WordPress/Project Statusllm-fuzzy
Range: <=1.6

Patches

Vulnerability mechanics

References

codevigilant.com/disclosure/2021/wp-plugin-project-status/nvdExploitThird Party Advisory
wpscan.com/vulnerability/ca5f2152-fcfd-492d-a552-f9604011beffnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000