CVE-2024-12509

creationtimestamp| type| source ---|---|--- 2024-12-20 07:15:57+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3ldptpkbm6423 2024-12-20 07:50:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113684057150820738 2024-12-20 09:13:09+00:00| seen|...

CVE-2024-12509 Embed Twine <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Embed Twine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedtwine' shortcode in all versions up to, and including, 0.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-12509 Embed Twine <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Embed Twine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'embedtwine' shortcode in all versions up to, and including, 0.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...