CVE-2024-32561

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tagembed allows Stored XSS.This issue affects Tagembed: from n/a through 4.7...

CVE-2024-32561 WordPress Tagembed plugin <= 4.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Tagembed allows Stored XSS.This issue affects Tagembed: from n/a through 4.7...

CVE-2024-32561

CVE-2024-32561 is a Stored XSS in Tagembed's WordPress widget (Tagembed). The issue arises from improper neutralization of input during web page generation and affects Tagembed: from n/a through 4.7. Exploitation could occur when a site displays user-supplied content through the widget, enabling ...

WordPress Tagembed Plugin <= 4.7 is vulnerable to Cross Site Scripting (XSS)

Software Tagembed Type Plugin Vulnerable versions = 4.7 Fixed in 4.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-32561 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 040c708c0568 Credits LVT-tholv2k Required privilege Contributor...