CVE-2024-5226

🗓️ 08 Aug 2024 06:15:40Reported by [email protected]Type

The Fuse Social Floating Sidebar plugin for WordPress is vulnerable to Stored Cross-Site Scripting due to insufficient SVG file validatio

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-5226	8 Aug 202408:52	–	circl
CNNVD	WordPress plugin Fuse Social Floating Sidebar 安全漏洞	8 Aug 202400:00	–	cnnvd
CVE	CVE-2024-5226	8 Aug 202405:31	–	cve
Cvelist	CVE-2024-5226 Fuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload	8 Aug 202405:31	–	cvelist
EUVD	EUVD-2024-46465	3 Oct 202520:07	–	euvd
Patchstack	WordPress Fuse Social Floating Sidebar plugin <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload vulnerability	8 Aug 202402:32	–	patchstack
Patchstack	WordPress Fuse Social Floating Sidebar Plugin <= 5.4.10 is vulnerable to Cross Site Scripting (XSS)	8 Aug 202400:00	–	patchstack
Positive Technologies	PT-2024-35138 · WordPress · Fuse Social Floating Sidebar	8 Aug 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-5226	23 May 202509:48	–	redhatcve
Vulnrichment	CVE-2024-5226 Fuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload	8 Aug 202405:31	–	vulnrichment

NVD

Node

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3131828/
plugins	www.plugins.trac.wordpress.org/browser/fuse-social-floating-sidebar/tags/5.4.10/framework/redux-core/inc/extensions/custom_fonts/class-redux-extension-custom-fonts.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/1a3137a1-8e46-44c6-8edd-ad9fc4d66e0b
wordpress	www.wordpress.org/plugins/fuse-social-floating-sidebar/

01 Mar 2025 02:25Current

CVSS 3.15.4 - 6.4

EPSS0.00233