CVE-2024-8721

The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-leve...

CVE-2024-8721

creationtimestamp| type| source ---|---|--- 2024-12-24 09:43:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113707151096936513 2024-12-24 10:15:43+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le27moohxs2i 2024-12-24 11:53:42+00:00| seen|...

CVE-2024-8721

CVE-2024-8721 is a Stored Cross-Site Scripting vulnerability affecting the WordPress plugin Tracking Code Manager. According to the connected Red Hat/Wordfence entries, the issue resides in the tracking code field of all versions up to 2.3.0, caused by insufficient input sanitization and output e...

CVE-2024-8721 Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-leve...

CVE-2024-8721 Tracking Code Manager <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Tracking Code Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the tracking code field in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-leve...