CVE-2024-5151

The SULly WordPress plugin versions prior to 4.3.1 are vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly sanitise and escape some of the plugin's settings. This flaw allows high-privilege users, such as administrators , to perform XSS attacks even in envi...

CVE-2024-5032

The SULly WordPress plugin (versions prior to 4.3.1 ) is vulnerable to Reflected Cross-Site Scripting (XSS) because it fails to properly sanitize and escape specific parameters before outputting them back to the page. This security flaw can be exploited against high-privilege users, such as admin...

CVE-2024-5033

The SULly WordPress plugin versions prior to 4.3.1 are vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks, missing sanitization, and improper escaping in certain areas. This flaw allows an attacker to trick a logged-in administrator into adding Stored XSS payloa...

CVE-2024-5034

The SULly WordPress plugin (versions prior to 4.3.1 ) is vulnerable to Cross-Site Request Forgery (CSRF) due to a lack of proper CSRF checks in certain areas. This flaw allows an attacker to trick a logged-in user into performing unintended actions, such as a plugin reset . The vulnerability is c...