Security Advisory

CVE-2024-4217

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-07-13 06:00:05

Last updated 2024-08-01 20:33:53

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a Contributor account to conduct Stored XSS attacks.

← Browse all CVEs View on cve.org ↗