CVE-2024-6929

creationtimestamp| type| source ---|---|--- 2024-09-05 13:00:05+00:00| seen| https://t.me/cvedetector/4893...

CVE-2024-6929 Dynamic Featured Image <= 3.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dfiFeatured Parameter

The Dynamic Featured Image plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘dfiFeatured’ parameter in all versions up to, and including, 3.7.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

WordPress Dynamic Featured Image Plugin <= 3.7.0 is vulnerable to Cross Site Scripting (XSS)

Software Dynamic Featured Image Type Plugin Vulnerable versions = 3.7.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-6929 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 6e79732a35b3 Credits vgo0 Required...