CVE-2024-11781

creationtimestamp| type| source ---|---|--- 2024-12-12 05:42:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113638253500915545 2024-12-12 07:58:45+00:00| seen| https://t.me/cvedetector/12743...

CVE-2024-11781

CVE-2024-11781 affects the WordPress plugin Smart Agenda – Prise de rendez-vous en ligne (versions up to 4.6). It enables authenticated attackers with contributor+ rights to trigger a Stored Cross-Site Scripting via the plugin’s smartagenda shortcode attributes due to insufficient input sanitizat...

CVE-2024-11781 Smart Agenda – Prise de rendez-vous en ligne <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Smart Agenda – Prise de rendez-vous en ligne plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'smartagenda' shortcode in all versions up to, and including, 4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...