{"metadata": {"vulnerability": "cve-2021-24313", "count": 17, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 11}}, "data": [{"timestamp": "2021-01-14T00:00:00Z", "date_only": false, "value": "2021-01-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-24313", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-06-01T11:33:30Z", "date_only": false, "value": "2021-06-01T11:33:30.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-24313", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-06-01T14:15:00Z", "date_only": false, "value": "2021-06-01T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-77VM-HFPH-F8G6", "record": "GHSA-77VM-HFPH-F8G6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-06-01T14:15:00Z", "date_only": false, "value": "2021-06-01T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-24313", "record": "GSD-2021-24313", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-06-01T14:15:08.920Z", "date_only": false, "value": "2021-06-01T14:15:08.920", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24313", "record": "FKIE_CVE-2021-24313", "field": "published"}, {"timestamp": "2021-06-03T00:00:00Z", "date_only": true, "value": "2021-06-03", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-69146", "record": "CNVD-2022-69146", "field": "submitTime"}, {"timestamp": "2021-06-11T14:55:10Z", "date_only": false, "value": "2021-06-11T14:55:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "cve-2021-24313", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-06-11T19:49:00Z", "date_only": false, "value": "2021-06-11T19:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-24313", "record": "GSD-2021-24313", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T19:03:46Z", "date_only": false, "value": "2022-05-24T19:03:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-77VM-HFPH-F8G6", "record": "GHSA-77VM-HFPH-F8G6", "field": "published"}, {"timestamp": "2022-05-24T19:03:46Z", "date_only": false, "value": "2022-05-24T19:03:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-77VM-HFPH-F8G6", "record": "GHSA-77VM-HFPH-F8G6", "field": "modified"}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": true, "value": "2022-10-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-69146", "record": "CNVD-2022-69146", "field": "openTime"}, {"timestamp": "2023-12-13T01:23:38.085Z", "date_only": false, "value": "2023-12-13T01:23:38.085290Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-24313", "record": "GSD-2021-24313", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T19:28:23.788Z", "date_only": false, "value": "2024-08-03T19:28:23.788Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-24313", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T19:28:23.788Z", "date_only": false, "value": "2024-08-03T19:28:23.788Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-24313", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:39:48.890Z", "date_only": false, "value": "2026-06-17T03:39:48.890", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-24313", "record": "FKIE_CVE-2021-24313", "field": "lastModified"}, {"timestamp": "2026-09-01T20:02:40.555Z", "date_only": false, "value": "2026-09-01T20:02:40.555577Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/10990", "record": "CVE-2021-24313", "field": "creation_timestamp", "uuid": "2411954a-27c6-4793-a289-448387aa7ffb", "content": "Exploit Collector\nWordPress WP Prayer 1.6.1 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-Nz8u9CyJbsU/WWlveW9d4WI/AAAAAAAAIPw/tdSVtwWBcYIHlgRN6nbdKVd_fE-UdNKsACLcBGAs/s1600/h80.png \nWordPress WP Prayer plugin version 1.6.1 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | a68a7b64369f6b1a3d49b44df9c98526\n\nDownload\n# Exploit Title: WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Authenticated)\n# Date: 2021-05-31\n# Exploit Author: Bastijn Ouwendijk\n# Vendor Homepage: http://goprayer.com/\n# Software Link: https://wordpress.org/plugins/wp-prayer/\n# Version: 1.6.1 and earlier\n# Tested on: Windows 10\n# Proof: https://bastijnouwendijk.com/cve-2021-24313/\n\nSteps to exploit this vulnerability:\n\n1. Log into the WordPress website with a user account, can be a user with any role\n2. Go to the page where prayer or praise request can be made and fill in the requested information\n3. In the 'prayer_messages' field of the prayer request form put the payload: \n4. Submit the form\n5. Go to the page where the prayer requests are listed\n6. The prayer requests are loaded and an alert is shown with text 'XSS' in the browser\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10990"}, {"timestamp": "2026-09-08T06:00:05.600Z", "date_only": false, "value": "2026-09-08T06:00:05.600239Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/10990", "record": "CVE-2021-24313", "field": "creation_timestamp", "uuid": "1c1d131d-56a3-4a39-9dd8-e337786f89b4", "content": "Exploit Collector\nWordPress WP Prayer 1.6.1 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-Nz8u9CyJbsU/WWlveW9d4WI/AAAAAAAAIPw/tdSVtwWBcYIHlgRN6nbdKVd_fE-UdNKsACLcBGAs/s1600/h80.png \nWordPress WP Prayer plugin version 1.6.1 suffers from a persistent cross site scripting vulnerability.\n\nMD5 | a68a7b64369f6b1a3d49b44df9c98526\n\nDownload\n# Exploit Title: WordPress Plugin WP Prayer version 1.6.1 - 'prayer_messages' Stored Cross-Site Scripting (XSS) (Authenticated)\n# Date: 2021-05-31\n# Exploit Author: Bastijn Ouwendijk\n# Vendor Homepage: http://goprayer.com/\n# Software Link: https://wordpress.org/plugins/wp-prayer/\n# Version: 1.6.1 and earlier\n# Tested on: Windows 10\n# Proof: https://bastijnouwendijk.com/cve-2021-24313/\n\nSteps to exploit this vulnerability:\n\n1. Log into the WordPress website with a user account, can be a user with any role\n2. Go to the page where prayer or praise request can be made and fill in the requested information\n3. In the 'prayer_messages' field of the prayer request form put the payload: \n4. Submit the form\n5. Go to the page where the prayer requests are listed\n6. The prayer requests are loaded and an alert is shown with text 'XSS' in the browser\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/10990"}]}