CVE-2024-12699

creationtimestamp| type| source ---|---|--- 2025-01-07 09:31:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113786373333021847 2025-01-07 09:36:25+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/383 2025-01-07 10:15:34+00:00| seen|...

CVE-2024-12699 Service Box <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Service Box plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary...