WordPress AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
CVE-2021-23150

4.8MEDIUM

Key Information:

Vendor: WordPress
Status: Amp For WP – Accelerated Mobile Pages (WordPress Plugin)
Vendor: CVE Published:; 18 March 2022

Summary

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability discovered in AMP for WP – Accelerated Mobile Pages plugin <= 1.0.77.31 versions.

Affected Version(s)

AMP for WP – Accelerated Mobile Pages (WordPress plugin) <= 1.0.77.31

References

https://patchstack.com/database/vulnerability/accelerated...

vdb-entry

CVSS V3.1

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Mar 18, 2022
Vulnerability Reserved
Jan 13, 2022

Credit

Nguyen Anh Tien (Patchstack Alliance)