WordPress Content Views plugin <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay vulnerability

🗓️ 25 Apr 2024 02:23:42Reported by wesley (wcraft)Type

Authenticated stored XSS in WordPress Content Views plugin up to version 3.7.0 via Widget Post Overlay.

Reporter	Title	Published	Views	Family All 11
CNNVD	WordPress plugin Content Views 安全漏洞	25 Apr 202400:00	–	cnnvd
CVE	CVE-2024-3929	25 Apr 202407:33	–	cve
Cvelist	CVE-2024-3929 Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay	25 Apr 202407:33	–	cvelist
EUVD	EUVD-2024-32496	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3929	25 Apr 202408:15	–	nvd
Patchstack	WordPress Content Views Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)	25 Apr 202400:00	–	patchstack
Positive Technologies	PT-2024-28422 · WordPress · Content Views – Post Grid & Filter	25 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3929	23 May 202509:26	–	redhatcve
Vulnrichment	CVE-2024-3929 Content Views – Post Grid & Filter, Recent Posts, Category Posts, & More (Gutenberg Blocks and Shortcode) <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Post Overlay	25 Apr 202407:33	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (April 22, 2024 to April 28, 2024)	2 May 202414:49	–	wordfence

Vulners

Node

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/content-views-query-and-display-post-page/content-views-post-grid-filter-recent-posts-category-posts-more-gutenberg-blocks-and-shortcode-370-authenticated-contributor-stored-cross-si

25 Apr 2024 02:23Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.4

EPSS0.00109

SSVC