Today > | 3 High vulnerabilities - You can now download lists of IOCs here!

CVE-2024-3111

June 27, 2024, 12:47 p.m.

Product(s) Impacted

Interactive Content WordPress plugin

before 1.15.8

Description

The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues

Weaknesses

Date

Published: June 27, 2024, 6:15 a.m.

Last Modified: June 27, 2024, 12:47 p.m.

Status : Undergoing Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com