Lucene search
HistoryJun 26, 2024 - 6:15 a.m.
CVE-2024-4959
frontend checklist
wordpress plugin
stored cross-site scripting
0.0004 Low
EPSS
Percentile
9.1%
The Frontend Checklist WordPress plugin through 2.3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Related
cvelist
cvelist
CVE-2024-4959 Frontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items
2024-06-26 06:00:03
wpvulndb
wpvulndb
Frontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items
2024-06-05 00:00:00
vulnrichment
vulnrichment
CVE-2024-4959 Frontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items
2024-06-26 06:00:03
wpexploit
wpexploit
Frontend Checklist <= 2.3.2 - Admin+ Stored XSS via Items
2024-06-05 00:00:00
cve
cve
CVE-2024-4959
2024-06-26 06:15:16