CVE-2024-8622

🗓️ 12 Sep 2024 08:30:45Reported by WordfenceType

The amCharts: Charts and Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'amcharts_javascript' parameter in all versions up to, and including, 1.4.4 due to the ability to supply arbitrary JavaScript a lack of nonce validation on the preview functionality. This allows unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-8622	12 Sep 202411:51	–	circl
CNNVD	WordPress plugin amCharts: Charts and Maps 跨站脚本漏洞	12 Sep 202400:00	–	cnnvd
Cvelist	CVE-2024-8622 amCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery	12 Sep 202408:30	–	cvelist
EUVD	EUVD-2024-49301	3 Oct 202520:07	–	euvd
NVD	CVE-2024-8622	12 Sep 202409:15	–	nvd
Patchstack	WordPress amCharts: Charts and Maps plugin <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery vulnerability	12 Sep 202406:18	–	patchstack
Patchstack	WordPress amCharts: Charts and Maps Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)	12 Sep 202400:00	–	patchstack
Positive Technologies	PT-2024-39137 · WordPress · Amcharts	12 Sep 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-8622	23 May 202507:18	–	redhatcve
Vulnrichment	CVE-2024-8622 amCharts: Charts and Maps <= 1.4.4 - Reflected Cross-Site Scripting via Cross-Site Request Forgery	12 Sep 202408:30	–	vulnrichment

NVD

Vulners

Node

amcharts amcharts:_charts_and_mapsRange<1.4.5wordpress

[
  {
    "vendor": "martynasma",
    "product": "amCharts: Charts and Maps",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.4.4",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3150041/
plugins	www.plugins.trac.wordpress.org/browser/amcharts-charts-and-maps/tags/1.4.4/includes/preview.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/5e3593e8-3840-4db0-8269-61bbcb50d569

08 Apr 2026 16:56Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.1

EPSS0.00742

SSVC

CWE-79