CVE-2024-5472

The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress WP QuickLaTeX Plugin < 3.8.7 is vulnerable to Cross Site Scripting (XSS)

Software WP QuickLaTeX Type Plugin Vulnerable versions 3.8.7 Fixed in 3.8.7 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5472 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 38a8e43c6fc5 Credits Felipe Caon Required privile...

CVE-2024-5472

creationtimestamp| type| source ---|---|--- 2024-07-13 08:49:35+00:00| seen| https://t.me/cvedetector/799...

CVE-2024-5472

The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-5472 WP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color field

The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-5472 WP QuickLaTeX < 3.8.7 - Admin+ Stored XSS in Background Color field

The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-5472

The WP QuickLaTeX WordPress plugin versions prior to 3.8.7 is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is a failure to sanitize and escape certain settings, specifically within the Background Color field . This allows high-privilege users, such as administrators, to perfor...