CVE-2021-24582

5.4 mediumEPSS 0.6%

Medium (5.4) in thinktwit project thinktwit. EPSS 0.6% chance of exploitation in the next 30 days.

The ThinkTwit WordPress plugin before 1.7.1 did not sanitise or escape its "Consumer key" setting before outputting it its settings page, leading to a Stored Cross-Site Scripting issue.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

thinktwit_project:thinktwit

References

https://wpscan.com/vulnerability/5a5293ed-ddcb-4a63-9420-09942e7d69c2
https://wpscan.com/vulnerability/5a5293ed-ddcb-4a63-9420-09942e7d69c2

Check your stack JSON