CVE-2024-0700

CVE-2024-0700 is a Stored XSS affecting WordPress Simple Tweet plugin up to version 1.4.0.2 due to insufficient input sanitization and output escaping. An attacker with author-level access (authenticated) can inject scripts that execute when users load injected pages. Root cause: inadequate sanit...

WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)

Software Simple Tweet Type Plugin Vulnerable versions = 1.4.0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0700 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ab2aad4c0181 Credits Benachi Required privilege...