Medium severity4.8NVD Advisory· Published Nov 23, 2021· Updated Jun 17, 2026
CVE-2021-24888
CVE-2021-24888
Description
The ImageBoss WordPress plugin before 3.0.6 does not sanitise and escape its Source Name setting, which could allow high privilege users to perform Cross-Site Scripting attacks
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/ImageBossdescription
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/19bffa71-705c-42fc-b2ca-bf62fabb70a0nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.