CVE-2024-13743

creationtimestamp| type| source ---|---|--- 2025-02-18 23:16:22+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liife56egk2o 2025-02-19 01:11:11+00:00| seen| https://t.me/cvedetector/18392 2025-02-19 02:11:34+00:00| seen|...

CVE-2024-13743 Wonder Video Embed <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Wonder Video Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wonderpluginvideo shortcode in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-13743

The CVE CVE-2024-13743 pertains to the WordPress plugin Wonder Video Embed (Wonder Plugin Video Embed). Impact is stored XSS via the wonderplugin_video shortcode in versions up to 2.2, caused by insufficient input sanitization and output escaping of user-supplied attributes. Exploitation requires...