Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-3368

May 20, 2024, 1 p.m.

Product(s) Impacted

All in One SEO WordPress plugin

before 4.6.1.1

Description

The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Weaknesses

Date

Published: May 20, 2024, 6:15 a.m.

Last Modified: May 20, 2024, 1 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/ contact@wpscan.com