Lucene search
HistoryJun 24, 2024 - 6:15 a.m.
CVE-2024-4899
seopress
wordpress
plugin
security
vulnerability
7.8
privilege
users
stored cross-site scripting
0.0004 Low
EPSS
Percentile
9.1%
The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.
Related
wpexploit
wpexploit
SEOPress < 7.8 - Contributor+ Stored XSS
2024-06-03 00:00:00
cve
cve
CVE-2024-4899
2024-06-24 06:15:11
wpvulndb
wpvulndb
SEOPress < 7.8 - Contributor+ Stored XSS
2024-06-03 00:00:00
cvelist
cvelist
CVE-2024-4899 SEOPress < 7.8 - Contributor+ Stored XSS
2024-06-24 06:00:01
wordfence
wordfence