{"metadata": {"vulnerability": "cve-2021-24308", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2021-01-14T00:00:00Z", "date_only": false, "value": "2021-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-24308", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-05-24T10:58:05Z", "date_only": false, "value": "2021-05-24T10:58:05.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-24308", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-05-24T11:15:00Z", "date_only": false, "value": "2021-05-24T11:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3MXR-2H37-XPJX", "record": "GHSA-3MXR-2H37-XPJX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-05-24T11:15:00Z", "date_only": false, "value": "2021-05-24T11:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-24308", "record": "GSD-2021-24308", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-05-24T11:15:08.387Z", "date_only": false, "value": "2021-05-24T11:15:08.387", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24308", "record": "FKIE_CVE-2021-24308", "field": "published"}, {"timestamp": "2021-05-28T09:45:28Z", "date_only": false, "value": "2021-05-28T09:45:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/518", "record": "CVE-2021-24308", "field": "creation_timestamp", "uuid": "15a457b6-0ee1-4b6b-a4ae-7017b8aa4dd0", "content": "CVE-2021-24308 WordPress Plugin LifterLMS 4.21.0 XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-24308_WordPress_Plugin_LifterLMS_4.21.0_XSS%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/518"}, {"timestamp": "2021-05-28T15:06:12Z", "date_only": false, "value": "2021-05-28T15:06:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2021-24308", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-06-03T14:22:00Z", "date_only": false, "value": "2021-06-03T14:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-24308", "record": "GSD-2021-24308", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T22:28:08Z", "date_only": false, "value": "2022-05-24T22:28:08Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3MXR-2H37-XPJX", "record": "GHSA-3MXR-2H37-XPJX", "field": "published"}, {"timestamp": "2022-05-24T22:28:08Z", "date_only": false, "value": "2022-05-24T22:28:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3MXR-2H37-XPJX", "record": "GHSA-3MXR-2H37-XPJX", "field": "modified"}, {"timestamp": "2023-12-13T01:23:37.494Z", "date_only": false, "value": "2023-12-13T01:23:37.494671Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-24308", "record": "GSD-2021-24308", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T19:28:23.207Z", "date_only": false, "value": "2024-08-03T19:28:23.207Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-24308", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T19:28:23.207Z", "date_only": false, "value": "2024-08-03T19:28:23.207Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-24308", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:39:48.367Z", "date_only": false, "value": "2026-06-17T03:39:48.367", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24308", "record": "FKIE_CVE-2021-24308", "field": "lastModified"}, {"timestamp": "2026-09-01T20:02:40.694Z", "date_only": false, "value": "2026-09-01T20:02:40.694194Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/10506", "record": "CVE-2021-24308", "field": "creation_timestamp", "uuid": "8cb8cfb6-b20f-46e5-9832-68e6cdab79a7", "content": "Exploit Collector\nWordPress LifterLMS 4.21.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png \nWordPress LifterLMS plugin version 4.21.0 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | c047b79bb03f1a1f0db714247c79a29b\n\nDownload\n# Exploit Title: WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS) \n# Date: 2021-05-10\n# Exploit Author: Captain_hook\n# Vendor Homepage: https://lifterlms.com/\n# Software Link: https://github.com/gocodebox/lifterlms/releases/tag/4.21.0\n# Version: LifterLMS < 4.21.1\n# Tested on: ANY\n# CVE : CVE-2021-24308\n\n#Summary:\n\nThe 'State' field of the Edit profile page of the LMS by LifterLMS \u00e2\u20ac\u201c Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. This could allow low privilege users (such as students) to elevate their privilege via an XSS attack when an admin will view their profile.\n\n#Proof_of_Concept:\n\n1- As a Lowest Privilege user go to the edit account page of the LMS\n(e.g https://example.com/my-courses/edit-account/)\n\n2- Put Your XSS payload in State parameter and save your edits, such\nas \">\n\n3- The XSS will be stored and triggered in the about section of the profile: (e.g  https://example.com/directory/[user_name]/) (Note): The XSS will also be triggered in the admin dashboard when viewing the user details, for example https://example.com/wp-admin/admin.php?page=llms-reporting&tab=students&stab=information&student_id=2\n\nRefernces:\n\nhttps://github.com/gocodebox/lifterlms/releases/tag/4.21.0\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10506"}, {"timestamp": "2026-09-08T06:00:05.432Z", "date_only": false, "value": "2026-09-08T06:00:05.432936Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/10506", "record": "CVE-2021-24308", "field": "creation_timestamp", "uuid": "5dcc22f4-580e-4278-b72e-6f1e9005f716", "content": "Exploit Collector\nWordPress LifterLMS 4.21.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-xhbT4GX8v9w/WWlvF89jtmI/AAAAAAAAILM/fSSkvnm11QwzZu21RJEqwX2S4icQcxCngCLcBGAs/s1600/h136.png \nWordPress LifterLMS plugin version 4.21.0 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | c047b79bb03f1a1f0db714247c79a29b\n\nDownload\n# Exploit Title: WordPress Plugin LifterLMS 4.21.0 - Stored Cross-Site Scripting (XSS) \n# Date: 2021-05-10\n# Exploit Author: Captain_hook\n# Vendor Homepage: https://lifterlms.com/\n# Software Link: https://github.com/gocodebox/lifterlms/releases/tag/4.21.0\n# Version: LifterLMS < 4.21.1\n# Tested on: ANY\n# CVE : CVE-2021-24308\n\n#Summary:\n\nThe 'State' field of the Edit profile page of the LMS by LifterLMS \u00e2\u20ac\u201c Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. This could allow low privilege users (such as students) to elevate their privilege via an XSS attack when an admin will view their profile.\n\n#Proof_of_Concept:\n\n1- As a Lowest Privilege user go to the edit account page of the LMS\n(e.g https://example.com/my-courses/edit-account/)\n\n2- Put Your XSS payload in State parameter and save your edits, such\nas \">\n\n3- The XSS will be stored and triggered in the about section of the profile: (e.g  https://example.com/directory/[user_name]/) (Note): The XSS will also be triggered in the admin dashboard when viewing the user details, for example https://example.com/wp-admin/admin.php?page=llms-reporting&tab=students&stab=information&student_id=2\n\nRefernces:\n\nhttps://github.com/gocodebox/lifterlms/releases/tag/4.21.0\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10506"}]}