{"metadata": {"vulnerability": "cve-2021-24535", "count": 16, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2021-01-14T00:00:00Z", "date_only": false, "value": "2021-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-24535", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-08-16T10:48:29Z", "date_only": false, "value": "2021-08-16T10:48:29.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-24535", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-08-16T10:48:29Z", "date_only": false, "value": "2021-08-16T10:48:29.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2021-24535", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-16T11:15:00Z", "date_only": false, "value": "2021-08-16T11:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6G8X-82FH-M598", "record": "GHSA-6G8X-82FH-M598", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-08-16T11:15:00Z", "date_only": false, "value": "2021-08-16T11:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-24535", "record": "GSD-2021-24535", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-08-16T11:15:08.953Z", "date_only": false, "value": "2021-08-16T11:15:08.953", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24535", "record": "FKIE_CVE-2021-24535", "field": "published"}, {"timestamp": "2021-08-16T14:14:52Z", "date_only": false, "value": "2021-08-16T14:14:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/27368", "record": "CVE-2021-24535", "field": "creation_timestamp", "uuid": "0e98b18d-30ab-46f2-8fd3-bfacdd79548f", "content": "\u203c CVE-2021-24535 \u203c\n\nThe Light Messages WordPress plugin through 1.0 is lacking CSRF check when updating it's settings, and is not sanitising its Message Content in them (even with the unfiltered_html disallowed). As a result, an attacker could make a logged in admin update the settings to arbitrary values, and set a Cross-Site Scripting payload in the Message Content. Depending on the options set, the XSS payload can be triggered either in the backend only (in the plugin's settings), or both frontend and backend.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/27368"}, {"timestamp": "2021-08-18T00:00:00Z", "date_only": true, "value": "2021-08-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-66918", "record": "CNVD-2021-66918", "field": "submitTime"}, {"timestamp": "2021-08-23T18:46:00Z", "date_only": false, "value": "2021-08-23T18:46Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-24535", "record": "GSD-2021-24535", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-08-31T00:00:00Z", "date_only": true, "value": "2021-08-31", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-66918", "record": "CNVD-2021-66918", "field": "openTime"}, {"timestamp": "2022-05-24T19:11:18Z", "date_only": false, "value": "2022-05-24T19:11:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6G8X-82FH-M598", "record": "GHSA-6G8X-82FH-M598", "field": "published"}, {"timestamp": "2022-05-24T19:11:18Z", "date_only": false, "value": "2022-05-24T19:11:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6G8X-82FH-M598", "record": "GHSA-6G8X-82FH-M598", "field": "modified"}, {"timestamp": "2023-12-13T01:23:37.663Z", "date_only": false, "value": "2023-12-13T01:23:37.663979Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-24535", "record": "GSD-2021-24535", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T19:35:20.179Z", "date_only": false, "value": "2024-08-03T19:35:20.179Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-24535", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T19:35:20.179Z", "date_only": false, "value": "2024-08-03T19:35:20.179Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-24535", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:40:11.830Z", "date_only": false, "value": "2026-06-17T03:40:11.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24535", "record": "FKIE_CVE-2021-24535", "field": "lastModified"}]}