← Database

CVE-2021-38316

MEDIUM CVSS: 6.1 Published: 2021-09-09 Modified: 2026-06-17

Description

The WP Academic People List WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the category_name parameter in the ~/admin-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.4.1.

Affected Platforms

Wp Academic People List Project Wp Academic People List

Weakness Type

CWE-79, CWE-79

References