Medium severity6.9NVD Advisory· Published Sep 27, 2021· Updated Jun 17, 2026
CVE-2021-36841
CVE-2021-36841
Description
Authenticated Stored Cross-Site Scripting (XSS) vulnerability in YITH Maintenance Mode (WordPress plugin) versions <= 1.3.7, vulnerable parameter &yith_maintenance_newsletter_submit_label. Possible even when unfiltered HTML is disallowed by WordPress configuration.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:yithemes:yith_maintenance_mode:*:*:*:*:*:wordpress:*:*Range: <=1.3.7
- Range: <=1.3.7
- Range: <= 1.3.7
Patches
Vulnerability mechanics
References
2- patchstack.com/database/vulnerability/yith-maintenance-mode/wordpress-yith-maintenance-mode-plugin-1-3-7-authenticated-stored-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory
- wordpress.org/plugins/yith-maintenance-mode/nvdProductThird Party Advisory
News mentions
0No linked articles in our index yet.