CVE-2024-4217

July 13, 2024, 6:15 a.m.

Product(s) Impacted

WordPress Plugin shortcodes-ultimate-pro

before 7.1.5

Description

The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a Contributor account to conduct Stored XSS attacks.

Weaknesses

Date

Published: July 13, 2024, 6:15 a.m.

Last Modified: July 13, 2024, 6:15 a.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

contact@wpscan.com

References

https://wpscan.com/vulnerability/55cb43bf-7c8f-4df7-b4de-bf2bb1c2766d/