CVE-2024-11904

The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msnttaddplustalk' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-11904

creationtimestamp| type| source ---|---|--- 2024-12-07 02:14:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113609125955564886 2024-12-07 04:10:44+00:00| seen| https://t.me/cvedetector/12303...

CVE-2024-11904 코드엠샵 소셜톡 <= 1.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The 코드엠샵 소셜톡 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'msnttaddplustalk' shortcode in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-11904

CVE-2024-11904 : The WordPress plugin 코드엠샵 소셜톡 (mshop-naver-talktalk) ≤ 1.2.0 suffers a Stored Cross-Site Scripting vulnerability via the shortcode msntt_add_plus_talk due to insufficient input sanitization and output escaping. Authenticated attackers with at least contributor access can inject s...