Skip to main content

Language Bar Flags

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2021-24431 MEDIUM POC This Month

The Language Bar Flags WordPress plugin through 1.0.8 does not have any CSRF in place when saving its settings and did not sanitise or escape them when generating the flag bar in the frontend. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF WordPress XSS Language Bar Flags
NVD WPScan
CVSS 3.1
4.3
EPSS
0.5%
CVE-2021-24431
EPSS 0% CVSS 4.3
MEDIUM POC This Month

The Language Bar Flags WordPress plugin through 1.0.8 does not have any CSRF in place when saving its settings and did not sanitise or escape them when generating the flag bar in the frontend. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF WordPress XSS +1
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy