CVE-2024-10108 WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode

🗓️ 30 Oct 2024 06:36:43Reported by WordfenceType

WPAdverts Classifieds Plugin <= 2.1.6 Unauthenticated XS

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2024-10108 WPAdverts – Classifieds Plugin <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via adverts_add Shortcode	30 Oct 202406:43	–	cvelist
Patchstack	WordPress WPAdverts – Classifieds Plugin Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)	29 Oct 202400:00	–	patchstack
CVE	CVE-2024-10108	30 Oct 202407:15	–	cve
NVD	CVE-2024-10108	30 Oct 202407:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 28, 2024 to November 3, 2024)	7 Nov 202414:15	–	wordfence

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3178088/
wordpress	www.wordpress.org/plugins/wpadverts/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/8b213c3b-3907-47d9-9826-379936f15078

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Oct 2024 06:43Current

6Medium risk

Vulners AI Score6

CVSS37.2

EPSS0.001

SSVC

CWE-79