CVE-2024-5444

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-5444 Bible Text <= 0.2 - Contributor+ Stored XSS

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-5444 Bible Text <= 0.2 - Contributor+ Stored XSS

The Bible Text WordPress plugin through 0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-5444

CVE-2024-5444 affects the Bible Text WordPress plugin (v0.2 and earlier). The issue arises from insufficient validation/escaping of shortcode attributes, allowing Stored XSS when a shortcode is embedded on a post/page and viewed by users with contributor+ roles. Red Hat’s entry reiterates the sam...

WordPress Bible Text Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)

Software Bible Text Type Plugin Vulnerable versions = 0.2 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5444 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID d17108b2186b Credits Bob Matyas Required privilege...