CVE-2024-1450

The Shariff Wrapper plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'shariff' shortcode in all versions up to, and including, 4.6.10 due to insufficient input sanitization and output escaping on user supplied attributes such as 'align'. This makes it possible fo...

CVE-2024-1450

The CVE-2024-1450 entry concerns the Shariff Wrapper WordPress plugin. It is vulnerable to a Stored XSS via the plugin shortcode shariff in all versions up to and including 4.6.10 due to insufficient input sanitization and output escaping on user-supplied attributes (e.g., align). Exploitation re...

WordPress Shariff Wrapper Plugin <= 4.6.10 is vulnerable to Cross Site Scripting (XSS)

Software Shariff Wrapper Type Plugin Vulnerable versions = 4.6.10 Fixed in 4.6.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1450 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 49c814a555ec Credits Richard Telleng stueot...