WordPress Common Tools for Site plugin <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin Common Tools for Site versions = 1.0.2...

WordPress Common Tools for Site Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Common Tools for Site Type Plugin Vulnerable versions = 1.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9115 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2d135571a4af Credits Francesco Carlucci...

WordPress plugin Common Tools for Site 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...