Auto Generated CVE annotations [Tue Sep 28 17:13:05 UTC 2021] 🤖

cves/2021/CVE-2021-24274.yaml

@@ -3,10 +3,16 @@ id: CVE-2021-24274
 info:
   name: Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)
   author: dhiyaneshDK
-  severity: low
+  severity: medium
   reference:
     - https://wpscan.com/vulnerability/200a3031-7c42-4189-96b1-bed9e0ab7c1d
   tags: wordpress,cves,cve2021
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
+    cvss-score: 6.10
+    cve-id: CVE-2021-24274
+    cwe-id: CWE-79
+  description: "The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue"
 
 requests:
   - method: GET