CVE-2024-10848

creationtimestamp| type| source ---|---|--- 2024-12-05 09:31:45+00:00| seen| https://infosec.exchange/users/cve/statuses/113599519411172621 2024-12-05 09:35:13+00:00| seen| https://infosec.exchange/users/cve/statuses/113599533079955717 2024-12-05 12:50:34+00:00| seen| https://t.me/cvedetector/120...

CVE-2024-10848

CVE-2024-10848 concerns the NewsMunch WordPress theme. The vulnerability is a stored cross-site scripting (XSS) flaw triggered by a malicious display name, exploitable in all versions up to 1.0.35. It requires authentication at Contributor level or higher, enabling an attacker to inject scripts t...