Lucene search
HistoryMay 20, 2024 - 6:15 a.m.
CVE-2024-3368
wordpress
plugin
validation
attack
xss
contributor
The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks
Related
vulnrichment
vulnrichment
CVE-2024-3368 All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
2024-05-20 06:00:01
wpexploit
wpexploit
All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
2024-04-29 00:00:00
cve
cve
CVE-2024-3368
2024-05-20 06:15:08
cvelist
cvelist
CVE-2024-3368 All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
2024-05-20 06:00:01
wpvulndb
wpvulndb
All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
2024-04-29 00:00:00
wordfence
wordfence