CVE-2024-10710

creationtimestamp| type| source ---|---|--- 2024-11-25 06:02:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113542072741792560...

CVE-2024-10710

The YaDisk Files WordPress plugin (versions 1.2.5 and earlier ) is vulnerable to Stored Cross-Site Scripting (XSS) because it fails to properly sanitize and escape certain settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks, even in environments where t...

WordPress YaDisk Files Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS)

Software YaDisk Files Type Plugin Vulnerable versions = 1.2.5 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10710 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 827a3585508c Credits WPscan Required privilege...