PT-2024-7484

Name of the Vulnerable Software and Affected Versions: CMSMasters Content Composer plugin for WordPress versions up to, and including, 1.8.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's multiple shortcodes due to insufficient input sanitization and output...

WordPress CMSMasters Content Composer Plugin <= 1.8.8 is vulnerable to Cross Site Scripting (XSS)

Software CMSMasters Content Composer Type Plugin Vulnerable versions = 1.8.8 Fixed in 1.9.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7963 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 38f9969e9e5b Credits István Márto...