Wp Symposium Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:wpsymposiumpro:wp_symposium_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wpsymposiumpro (38b1127b-b5fd-5bf1-85f9-c5342d4be46a) |
|---|---|
| Product | Wp Symposium Pro (732d9bce-49eb-5fd9-8490-817a8982f8eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/wp-symposium-pro |
purl2cpe | 2026-06-01 10:11:46.665284 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47927 |
vulnerable | 2026-06-08 05:38:07.920044 |
WordPress Plugin WP Symposium Pro 2021.10 Stored XSS via wps_admin_forum_add_name
MEDIUM (6.4)
WordPress Plugin WP Symposium Pro 2021.10 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting insufficient sanitization of the forum name parameter. Attackers can submit POST requests to the admin setup page with JavaScript payloads in the wps_admin_forum_add_name parameter, which are stored and executed when the forum is accessed.
Published: 2026-05-10T12:43:48.946Z
Updated: 2026-05-24T01:37:08.587Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.