EUVD-2024-42384

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Improper Input Neutralization in WaspThemes YellowPencil allows Reflected Cross-site Scripting exploit

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-47348	6 Oct 202414:02	–	circl
CVE	CVE-2024-47348	6 Oct 202410:28	–	cve
Cvelist	CVE-2024-47348 WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability	6 Oct 202410:28	–	cvelist
NVD	CVE-2024-47348	6 Oct 202411:15	–	nvd
Patchstack	WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.6.4 is vulnerable to Cross Site Scripting (XSS)	30 Sep 202400:00	–	patchstack
Patchstack	WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability	30 Sep 202408:48	–	patchstack
Positive Technologies	PT-2024-32563 · Unknown · Yellowpencil Visual Css Style Editor	6 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-47348	5 Feb 202508:20	–	redhatcve
Vulnrichment	CVE-2024-47348 WordPress Visual CSS Style Editor plugin <= 7.6.4 - Reflected Cross Site Scripting (XSS) vulnerability	6 Oct 202410:28	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (September 30, 2024 to October 6, 2024)	10 Oct 202416:10	–	wordfence

[
  {
    "enisaIdVendor": [
      {
        "id": "af8b2368-fbf1-3904-a6c1-604227068884",
        "vendor": {
          "name": "WaspThemes"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "25891169-fabe-3798-971a-a9ec7c673d4a",
        "product": {
          "name": "YellowPencil Visual CSS Style Editor"
        },
        "product_version": "n/a ≤7.6.4"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/yellow-pencil-visual-theme-customizer/wordpress-visual-css-style-editor-plugin-7-6-4-reflected-cross-site-scripting-xss-vulnerability

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.1

EPSS0.0028

SSVC