CVE-2024-11902 Slope Widgets <= 4.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

🗓️ 16 Dec 2024 23:17:24Reported by WordfenceType

Slope Widgets plugin for WordPress allows Stored Cross-Site Scripting for authenticated users up to 4.2.11.

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2024-11902	17 Dec 202400:15	–	cve
Cvelist	CVE-2024-11902 Slope Widgets <= 4.2.11 - Authenticated (Contributor+) Stored Cross-Site Scripting	16 Dec 202423:24	–	cvelist
NVD	CVE-2024-11902	17 Dec 202400:15	–	nvd
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7700f1f3-90e2-450d-9cfe-c922d0cc6a1e
plugins	www.plugins.trac.wordpress.org/browser/slope-widgets/trunk/slope-reservations.php
wordpress	www.wordpress.org/plugins/slope-widgets/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Dec 2024 23:24Current

5.9Medium risk

Vulners AI Score5.9

CVSS36.4

EPSS0.001

SSVC

CWE-79