CVE-2024-12921

creationtimestamp| type| source ---|---|--- 2025-01-30 05:25:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113915640840193737 2025-01-30 06:16:04+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwti7re2v2t 2025-01-30 07:11:22+00:00| seen|...

CVE-2024-12921 EthereumICO <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ethereum-ico Shortcode

The EthereumICO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's ethereum-ico shortcode in all versions up to, and including, 2.4.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-12921

CVE-2024-12921 : EthereumICO WordPress plugin (