Lucene search
+L

4 matches found

Cvelist
Cvelist
added 2024/03/31 7:56 p.m.24 views

CVE-2024-30551 WordPress Sticky Anything plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky Anything: from n/a through 2.1.5...

7.1CVSS7.1AI score0.00334EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/31 7:56 p.m.24 views

CVE-2024-30551 WordPress Sticky Anything plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Toast Plugins Sticky Anything.This issue affects Sticky Anything: from n/a through 2.1.5...

7.1CVSS6.9AI score0.00334EPSS
Exploits0References1
CVE
CVE
added 2024/03/31 7:56 p.m.58 views

CVE-2024-30551

CVE-2024-30551 (Sticky Anything, Toast Stick Anything WordPress plugin) is an unauthenticated Stored XSS in Sticky Anything, affecting versions up to 2.1.5. The CVSSv3.1 score is 7.1 (HIGH) with Network attack vector, no privileges, user interaction required, and changed scope; impact to confiden...

7.1CVSS8.6AI score0.00334EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/03/29 12:0 a.m.12 views

WordPress Sticky Anything Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)

Software Sticky Anything Type Plugin Vulnerable versions = 2.1.5 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30551 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 25bb0e7db645 Credits Mika Required privilege...

7.1CVSS6.5AI score0.00334EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder