5 matches found
CVE-2024-23514
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ClickToTweet.Com Click To Tweet allows Stored XSS.This issue affects Click To Tweet: from n/a through 2.0.14...
CVE-2024-23514
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ClickToTweet.Com Click To Tweet allows Stored XSS.This issue affects Click To Tweet: from n/a through 2.0.14...
CVE-2024-23514 WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ClickToTweet.Com Click To Tweet allows Stored XSS.This issue affects Click To Tweet: from n/a through 2.0.14...
CVE-2024-23514
CVE-2024-23514 is a Stored XSS vulnerability in the WordPress Click To Tweet plugin (versions up to 2.0.14). The issue arises from improper input neutralization during web page generation, allowing authenticated users (Contributor+) to inject scripts that may execute when others view affected pag...
WordPress Click To Tweet Plugin <= 2.0.14 is vulnerable to Cross Site Scripting (XSS)
Software Click To Tweet Type Plugin Vulnerable versions = 2.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-23514 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID dfb01ad116d2 Credits Ngô Thiên An ancorn from VNPT-VCI Requir...