CVE-2024-9600

The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high privilege users such as author to perform Stored Cross-Site Scripting attacks...

CVE-2024-9600 Ditty < 3.1.47 - Author+ Stored XSS

The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high privilege users such as author to perform Stored Cross-Site Scripting attacks...

CVE-2024-9600

The Ditty WordPress plugin versions prior to 3.1.47 are vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the plugin's failure to properly sanitise and escape some of its settings. This flaw allows users with high privileges, such as authors , to perform XSS attacks. To ...

CVE-2024-9600 Ditty < 3.1.47 - Author+ Stored XSS

The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high privilege users such as author to perform Stored Cross-Site Scripting attacks...