CVE-2024-13357

creationtimestamp| type| source ---|---|--- 2025-05-15 20:46:07+00:00| seen| https://bsky.app/profile/potato.software/post/3lpaf2lnear2f...

CVE-2024-13357 Ditty – Responsive News Tickers, Sliders, and Lists < 3.1.52 - Author+ Stored XSS

The Ditty WordPress plugin before 3.1.52 does not sanitise and escape some of its settings, which could allow high privilege users such as author to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-13357

The Ditty WordPress plugin, in versions prior to 3.1.52 , is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitize and escape certain plugin settings. This flaw allows high-privilege users, such as authors , to perform XSS attacks, even in environmen...

WordPress Ditty plugin < 3.1.52 - Author+ Stored XSS vulnerability

Author+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Ditty versions 3.1.52...