CVE-2024-12037

creationtimestamp| type| source ---|---|--- 2025-01-31 11:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzuos4cvj2t 2025-01-31 12:52:04+00:00| seen| https://t.me/cvedetector/16929 2025-01-31 13:15:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3655...

CVE-2024-12037 Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions UGC plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bfnewsubmissionlink' shortcode in all versions up to, and including, 2.8.13 due to insufficient...