6 matches found
CVE-2024-0973
The Widget for Social Page Feeds WordPress plugin before 6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
WordPress Widget for Social Page Feeds Plugin < 6.4 is vulnerable to Cross Site Scripting (XSS)
Software Widget for Social Page Feeds Type Plugin Vulnerable versions 6.4 Fixed in 6.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0973 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4afed9c5ac4e Credits Dmitrii Ignatyev...
CVE-2024-0973
The Widget for Social Page Feeds WordPress plugin before 6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-0973 Widget for Social Page Feeds < 6.4 - Admin+ Stored XSS
The Widget for Social Page Feeds WordPress plugin before 6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-0973 Widget for Social Page Feeds < 6.4 - Admin+ Stored XSS
The Widget for Social Page Feeds WordPress plugin before 6.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2024-0973
The Widget for Social Page Feeds WordPress plugin versions prior to 6.4 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw could allow high-privilege users, such as administrators, to perform XSS a...