Lucene search
CVE-2024-3754
The Alemha watermarker WordPress plugin vulnerabilit
Show more
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2024-3754 Alemha Watermarker <= 1.3.1 - Author+ Stored XSS | 14 Jun 202406:00 | – | cvelist |
 | CVE-2024-3754 Alemha Watermarker <= 1.3.1 - Author+ Stored XSS | 14 Jun 202406:00 | – | vulnrichment |
 | Alemha Watermarker <= 1.3.1 - Author+ Stored XSS | 24 May 202400:00 | – | wpvulndb |
 | Alemha Watermarker <= 1.3.1 - Author+ Stored XSS | 24 May 202400:00 | – | wpexploit |
 | WordPress Alemha watermarker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS) | 24 May 202400:00 | – | patchstack |
 | CVE-2024-3754 | 14 Jun 202406:15 | – | nvd |
 | Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024) | 30 May 202415:23 | – | wordfence |
Node
alemha_watermarkerRange≤1.3.1wordpress
[
{
"vendor": "Unknown",
"product": "Alemha watermarker",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThanOrEqual": "1.3.1"
}
],
"defaultStatus": "affected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| post_type | query param | /wp-admin/post-new.php | Allows high privilege users to perform Stored Cross-Site Scripting attacks by not sanitizing user input in a watermark text field. | CWE-79 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo14 Jun 2024 06:15Current
4.5Medium risk
Vulners AI Score4.5
CVSS34.7
EPSS0.00043
SSVC