CVE-2024-13659

The Listamester plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-13659

The Listamester plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-13659

creationtimestamp| type| source ---|---|--- 2025-01-24 05:25:17+00:00| seen| https://infosec.exchange/users/cve/statuses/113881665846872445 2025-01-24 06:12:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2875 2025-01-24 07:42:41+00:00| seen| https://t.me/cvedetector/16251...

CVE-2024-13659 Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Listamester plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-13659 Listamester <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Listamester plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2024-13659

CVE-2024-13659 – Listamester (WordPress) is a Stored Cross‑Site Scripting (XSS) vulnerability in the Listamester WordPress plugin. Affected versions are up to and including 2.3.4. The issue arises from insufficient input sanitization and inadequate output escaping on attributes supplied to the pl...