CVE-2024-2304

The Animated Headline plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'animated-headline' shortcode in all versions up to, and including, 4.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-2304

The CVE refers to the WordPress Animated Headline plugin (affected: all versions up to 4.0) with a Stored XSS vulnerability via the animated-headline shortcode caused by insufficient input sanitization and lack of proper output escaping on user-supplied attributes. Exploitation requires authentic...

WordPress Animated Headline Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)

Software Animated Headline Type Plugin Vulnerable versions = 4.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2304 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4d47f1ad7254 Credits Tien Luong Required...