CyberSec.Space Logo
Back to CVE Browser

CVE-2021-24374

MEDIUM
5.3
CVSS Severity Score
EPSS Score0.0300%
EPSS Percentile26.83th
PublishedJun 21, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

The Jetpack Carousel module of the JetPack WordPress plugin before 9.8 allows users to create a "carousel" type image gallery and allows users to comment on the images. A security vulnerability was found within the Jetpack Carousel module by nguyenhg_vcs that allowed the comments of non-published page/posts to be leaked.

Affected Platforms (CPE)

📦
Automattic

Jetpack

< 9.8

References & Advisories

🔗 https://jetpack.com/2021/06/01/jetpack-9-8-engage-your-audience-with-wordpress-stories/
🔗 https://wpscan.com/vulnerability/08a8a51c-49d3-4bce-b7e0-e365af1d8f33
🔗 https://jetpack.com/2021/06/01/jetpack-9-8-engage-your-audience-with-wordpress-stories/
🔗 https://wpscan.com/vulnerability/08a8a51c-49d3-4bce-b7e0-e365af1d8f33

Related Vulnerabilities

CVE-2021-242289.6

The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. ...

CVE-2021-242299.6

The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the...

CVE-2021-250368.8

The All in One SEO WordPress plugin before 4.1.5.3 is affected by a Privilege Escalation issue, which was discovered during an int...

CVE-2021-242308.1

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing...