CVE-2024-0689

CVE-2024-0689 involves the Custom Field Suite plugin for WordPress, where a Stored XSS exists in meta imports for all versions up to 2.6.4 due to insufficient input sanitization and output escaping. Affected: WordPress multisite installations and sites with unfiltered_html disabled. Impact: authe...

CVE-2019-11871

The CVE-2019-11871 entry concerns the WordPress plugin Custom Field Suite, affected in versions before 2.5.15. The vulnerability is an authenticated Cross-Site Scripting (XSS) flaw exploitable by editors or admins. The available connected documents confirm the affected component and scope but do ...

CVE-2023-32515

CVE-2023-32515 affects WordPress Custom Field Suite plugin, vulnerable in versions

CVE-2024-3068

CVE-2024-3068 : The WordPress plugin Custom Field Suite is vulnerable to Stored Cross-Site Scripting via the parameter cfs[fields][*][name] in all versions up to 2.6.5. The issue stems from insufficient input sanitization and output escaping, enabling an authenticated admin to inject scripts that...