CVE-2024-5485

CVE-2024-5485 affects the SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! WordPress plugin. The stored XSS exists in the Trigger Link shortcode in all versions up to 1.0.47 (per the CVE description) and can be exploited by an authenticated user with contributor-level a...

WordPress SureTriggers Plugin <= 1.0.47 is vulnerable to Cross Site Scripting (XSS)

Software SureTriggers Type Plugin Vulnerable versions = 1.0.47 Fixed in 1.0.48 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-5485 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 08080f87c55e Credits Krzysztof Zając Required...