{"metadata": {"vulnerability": "cve-2021-25090", "count": 16, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2021-01-14T00:00:00Z", "date_only": false, "value": "2021-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-25090", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-04-11T14:40:38Z", "date_only": false, "value": "2022-04-11T14:40:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-25090", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-11T14:40:38Z", "date_only": false, "value": "2022-04-11T14:40:38.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2021-25090", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-04-11T15:15:00Z", "date_only": false, "value": "2022-04-11T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-3PRR-Q5HC-2742", "record": "GHSA-3PRR-Q5HC-2742", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-11T15:15:00Z", "date_only": false, "value": "2022-04-11T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-25090", "record": "GSD-2021-25090", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-11T15:15:08.023Z", "date_only": false, "value": "2022-04-11T15:15:08.023", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25090", "record": "FKIE_CVE-2021-25090", "field": "published"}, {"timestamp": "2022-04-11T18:16:08Z", "date_only": false, "value": "2022-04-11T18:16:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/40470", "record": "CVE-2021-25090", "field": "creation_timestamp", "uuid": "bbaebef2-376f-489b-88a0-211027d3d114", "content": "\u203c CVE-2021-25090 \u203c\n\nThe Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any authenticated users, such as subscriber, to call them. Due to the lack of sanitisation and escaping, it could also allows attackers to perform Cross-Site Scripting attacks on pages where a Portfolio is embed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/40470"}, {"timestamp": "2022-04-12T00:00:36Z", "date_only": false, "value": "2022-04-12T00:00:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-3PRR-Q5HC-2742", "record": "GHSA-3PRR-Q5HC-2742", "field": "published"}, {"timestamp": "2022-04-13T00:00:00Z", "date_only": true, "value": "2022-04-13", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-44712", "record": "CNVD-2022-44712", "field": "submitTime"}, {"timestamp": "2022-04-15T17:47:00Z", "date_only": false, "value": "2022-04-15T17:47Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-25090", "record": "GSD-2021-25090", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-04-16T00:01:11Z", "date_only": false, "value": "2022-04-16T00:01:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-3PRR-Q5HC-2742", "record": "GHSA-3PRR-Q5HC-2742", "field": "modified"}, {"timestamp": "2022-06-13T00:00:00Z", "date_only": true, "value": "2022-06-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-44712", "record": "CNVD-2022-44712", "field": "openTime"}, {"timestamp": "2023-12-13T01:23:21.648Z", "date_only": false, "value": "2023-12-13T01:23:21.648028Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-25090", "record": "GSD-2021-25090", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T19:56:10.579Z", "date_only": false, "value": "2024-08-03T19:56:10.579Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-25090", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T19:56:10.579Z", "date_only": false, "value": "2024-08-03T19:56:10.579Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-25090", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:41:26.567Z", "date_only": false, "value": "2026-06-17T03:41:26.567", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25090", "record": "FKIE_CVE-2021-25090", "field": "lastModified"}]}