CVE-2021-39340

MEDIUM
Published Nov 1, 20214y ago · Modified Jun 17, 20262w ago
4.8 CVSS 3.1
Medium
Find Similar
Published Nov 1, 2021 4y ago
Last Modified Jun 17, 2026 2w ago

Description

The Notification WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/src/classes/Utils/Settings.php file which made it possible for attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 7.2.4. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.

CVSS Details

Base Score
4.8
Exploitability
1.7
Impact
2.7
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction Required
Scope Changed
Confidentiality Low
Integrity Low
Availability None

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

VendorProductVersionRange
bracketspacenotification* ≤7.2.4

References 3

  • github.com https://github.com/BigTiger2020/word-press/blob/main/Notification.md
    ExploitThird Party Advisory
  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/notification/tags/7.2.4/src/classes/Utils/Settings.php#L167
    PatchThird Party Advisory
  • wordfence.com https://wordfence.com/vulnerability-advisories/#CVE-2021-39340
    Third Party Advisory

Remediation

  • plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/notification/tags/7.2.4/src/classes/Utils/Settings.php#L167
    PatchThird Party Advisory