CVE-2024-10187 myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode

🗓️ 08 Nov 2024 09:33:29Reported by WordfenceType

Vulnerability in myCred WordPress plugin 2.7.4

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2024-10187	8 Nov 202410:15	–	cve
Patchstack	WordPress myCred Plugin <= 2.7.4 is vulnerable to Cross Site Scripting (XSS)	7 Nov 202400:00	–	patchstack
Cvelist	CVE-2024-10187 myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode	8 Nov 202409:29	–	cvelist
NVD	CVE-2024-10187	8 Nov 202410:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 4, 2024 to November 10, 2024)	14 Nov 202419:29	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/23a081d4-443d-4b3b-8c89-9eb0e23c961e
plugins	www.plugins.trac.wordpress.org/changeset/3183178/
wordpress	www.wordpress.org/plugins/mycred/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo