Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wpfront_notification_bar:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWpfront Notification Bar (327cd813-a822-5f83-a12d-9f9e97ce3771)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-24601 vulnerable 2026-06-08 05:30:38.843582 WPFront Notification Bar < 2.1.0.08087 - Authenticated Stored XSS
The WPFront Notification Bar WordPress plugin before 2.1.0.08087 does not properly sanitise and escape its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Published: 2021-09-06T11:09:32.000Z
Updated: 2024-08-03T19:35:20.227Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24518 vulnerable 2026-06-08 05:30:04.511996 WPFront Notification Bar < 2.0.0.07176 - Authenticated Stored XSS
The WPFront Notification Bar WordPress plugin before 2.0.0.07176 does not sanitise or escape its Custom CSS setting, allowing high privilege users such as admin to set XSS payload in it even when the unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue
Published: 2021-08-16T10:48:24.000Z
Updated: 2024-08-03T19:35:19.719Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.