Medium severity4.8NVD Advisory· Published Nov 8, 2021· Updated Jun 17, 2026
CVE-2021-24708
CVE-2021-24708
Description
The Export any WordPress data to XML/CSV WordPress plugin before 1.3.1 does not escape its Export's Name before outputting it in Manage Exports settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Export any WordPress data to XML/CSV WordPress plugindescription
- Range: <1.3.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/4560eef4-253b-49a4-8e20-9520c45c6f7fnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.