Medium severity5.4NVD Advisory· Published Nov 17, 2021· Updated Jun 17, 2026
CVE-2021-24850
CVE-2021-24850
Description
The Insert Pages WordPress plugin before 3.7.0 adds a shortcode that prints out other pages' content and custom fields. It can be used by users with a role as low as Contributor to perform Cross-Site Scripting attacks by storing the payload/s in another post's custom fields.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Insert Pagesdescription
- Range: <3.7.0
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/2d6f9be0-b9fd-48e5-bd68-94eeb3822c0anvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.