← Database

CVE-2021-36911

MEDIUM CVSS: 4.8 Published: 2021-12-10 Modified: 2026-06-17

Description

Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Comment Engine Pro plugin (versions <= 1.0), could be exploited by users with Editor or higher role.

Affected Platforms

Comment Engine Pro Project Comment Engine Pro

Weakness Type

CWE-79, CWE-79

References