2 matches found
SUSE CVE-2024-2430
The Website Content in Page or Post WordPress plugin before 2024.04.09 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site...
5.4CVSS6.1AI score0.00312EPSS
SaveExploits1References2
PT-2024-20342
Name of the Vulnerable Software and Affected Versions Website Content in Page or Post WordPress plugin versions prior to 2024.04.09 Description The issue concerns the Website Content in Page or Post WordPress plugin, which does not properly validate and escape certain shortcode attributes before...
6.5CVSS5.9AI score0.00312EPSS
SaveExploits1References11
20