Lucene search

CVE-2024-3558

🗓️ 20 Jun 2024 02:09:15Reported by [email protected]Type

The Custom Field Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cfs[post_title]' parameter due to insufficient input sanitization and output escaping

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2024-3558 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]	20 Jun 202402:08	–	vulnrichment
Patchstack	WordPress Custom Field Suite Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)	19 Jun 202400:00	–	patchstack
Cvelist	CVE-2024-3558 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via cfs[post_title]	20 Jun 202402:08	–	cvelist
OSV	CVE-2024-3558	20 Jun 202402:15	–	osv
CVE	CVE-2024-3558	20 Jun 202402:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 17, 2024 to June 23, 2024)	27 Jun 202415:00	–	wordfence

Nvd

Node

custom_field_suite_project custom_field_suiteRange≤2.6.7wordpress

Source	Link
mgibbs189	www.mgibbs189.github.io/custom-field-suite/
github	www.github.com/WordPress/WordPress/blob/22d95abc55824e83904dc0fef290464b6bec7708/wp-admin/includes/template.php
github	www.github.com/mgibbs189/custom-field-suite/blob/963dfcede18ff4ad697498556d9058db07d74fa3/includes/api.php
core	www.core.trac.wordpress.org/ticket/56655
en-gb	www.en-gb.wordpress.org/plugins/custom-field-suite/
github	www.github.com/mgibbs189/custom-field-suite/blob/963dfcede18ff4ad697498556d9058db07d74fa3/includes/form.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/8e4dc6fd-4bd5-4ed1-ade0-cf2f8831fac3
github	www.github.com/mgibbs189/custom-field-suite/blob/963dfcede18ff4ad697498556d9058db07d74fa3/includes/field_group.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo