CVE-2021-24926 Scanner
CVE-2021-24926 scanner - Cross-Site Scripting (XSS) vulnerability in Domain Check plugin for WordPress
Short Info
Level
Medium
Single Scan
Single Scan
Can be used by
Asset Owner
Estimated Time
10 seconds
Time Interval
1 month 3 days
Scan only one
Domain, IPv4, Subdomain
Toolbox
-
The Domain Check plugin for WordPress is a tool designed to provide website owners with a simple and effective way to check the availability of domains. This plugin is commonly used by WordPress-powered websites to streamline the process of domain name registration and management. Users can easily check the availability of a desired domain name, and if it's available, register it directly from the WordPress dashboard. Additionally, users can also track the availability of various domain names and receive notifications if any become available.
Recently, a vulnerability in the Domain Check plugin, identified as CVE-2021-24926, has been detected. This vulnerability occurs due to the lack of sanitisation and escape of the domain parameter before it's outputted on the page. As a result, attackers may inject malicious code into the website through the domain parameter, leading to a Reflected Cross-Site Scripting (XSS) issue.
When exploited, this vulnerability can allow attackers to execute potentially harmful scripts on the website, leading to various malicious activities such as data theft and website defacement. Furthermore, the sensitive information of both website owners and users may be compromised.
Finally, to ensure the safety of their digital assets, website owners can turn to s4e.io for expert guidance. This platform provides advanced security features that make the process of identifying and patching vulnerabilities much easier. With s4e.io, website owners can quickly learn about any potential threats and ensure the safety of their online presence. Don't wait any longer, secure your website today with s4e.io!
REFERENCES
