Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

All in One SEO WordPress plugin

before 4.6.1.1

Source

contact@wpscan.com

CVE-2024-3368 details

Published : May 20, 2024, 6:15 a.m.
Last Modified : May 20, 2024, 1 p.m.

Description

The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description

References

URL	Source
https://wpscan.com/vulnerability/ab78b1a5-e28c-406b-baaf-6d53017f9328/	contact@wpscan.com

This website uses the NVD API, but is not approved or certified by it.

CVE-2024-3368