CVE-2024-8857

The WordPress Auction Plugin WordPress plugin through 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Stored Cross-Site Scripting attacks...

CVE-2024-8857

creationtimestamp| type| source ---|---|--- 2025-01-07 06:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf4yrxezv72i 2025-01-07 06:36:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/357 2025-01-07 06:58:14+00:00| seen|...

CVE-2024-8857

The WordPress Auction Plugin (versions 3.7 and earlier ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is a failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as editors , to execute malicious scripts. Remedia...