CVE-2021-46781

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Coming Soon by Supsystic WordPress plugin before 1.7.6 does not sanitise and escape the tab parameter before outputting it back in an attribute in the admin dashboard, leading to a Reflected Cross-Site Scripting

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Apr 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-467826.1The Pricing Table by Supsystic WordPress plugin before 1.9.5 does not escape the tab parameter before outputting it back in an attribute in CVE-2021-467846.5In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when proCVE-2021-467855.3The Property module has a vulnerability in permission control.This vulnerability can be exploited to obtain the unique device identifier.CVE-2021-467869.8The audio module has a vulnerability in verifying the parameters passed by the application space.Successful exploitation of this vulnerabiliCVE-2021-467877.5The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system applicaCVE-2021-467887.5Third-party pop-up window coverage vulnerability in the iConnect module.Successful exploitation of this vulnerability may cause system pop-uCVE-2021-467897.5Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.CVE-2021-467907.8ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream position is that ntfsck isCVE-2021-467915.5Insufficient input validation during parsing of the System Management Mode (SMM) binary may allow a maliciously crafted SMM executable binarCVE-2021-467925.9Time-of-check Time-of-use (TOCTOU) in the BIOS2PSP command may allow an attacker with a malicious BIOS to create a race condition causing thCVE-2021-467947.5Insufficient bounds checking in ASP (AMD Secure Processor) may allow for an out of bounds read in SMI (System Management Interface) mailbox CVE-2021-467954.7A TOCTOU (time-of-check to time-of-use) vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory