CVE-2021-24607

4.8 mediumEPSS 0.6%

Medium (4.8) in wooassist storefront footer text. EPSS 0.6% chance of exploitation in the next 30 days.

The Storefront Footer Text WordPress plugin through 1.0.1 does not sanitize and escape the "Footer Credit Text" added to pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered-html capability is disallowed.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wooassist:storefront_footer_text

References

https://wpscan.com/vulnerability/efa7d91a-447b-4fd8-aa21-5364b177fee9
https://wpscan.com/vulnerability/efa7d91a-447b-4fd8-aa21-5364b177fee9

Check your stack JSON