Vulners
Lucene search
2 matches found
CVE-2024-7769
The ClickSold IDX WordPress plugin through 1.90 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.8CVSS5.7AI score0.00302EPSS
Exploits1References1
CVE-2024-7769
The ClickSold IDX WordPress plugin through 1.90 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.8CVSS0.00302EPSS
Exploits1References1
20