CVE-2024-5151

The SULly WordPress plugin versions prior to 4.3.1 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape some of the plugin's settings. This flaw allows high-privilege users, such as administrators , to perform XSS attacks even in envi...

CVE-2024-5032

The SULly WordPress plugin before 4.3.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

CVE-2024-5033

The SULly WordPress plugin versions prior to 4.3.1 are vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks, missing sanitization, and improper escaping in certain areas. This flaw allows an attacker to trick a logged-in administrator into adding Stored XSS payloa...

CVE-2024-5034

The SULly WordPress plugin (versions prior to 4.3.1 ) is vulnerable to Cross-Site Request Forgery (CSRF) due to a lack of proper CSRF checks in certain areas. This flaw allows an attacker to trick a logged-in user into performing unintended actions, such as a plugin reset . The vulnerability is c...