CVE-2024-11905 Animated Counters <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

🗓️ 16 Dec 2024 23:17:24Reported by WordfenceType

Vulnerability in Animated Counters plugin allows stored XSS for authenticated contributors and above.

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2024-11905 Animated Counters <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting	16 Dec 202423:24	–	cvelist
NVD	CVE-2024-11905	17 Dec 202400:15	–	nvd
CVE	CVE-2024-11905	17 Dec 202400:15	–	cve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 16, 2024 to January 5, 2025)	9 Jan 202514:35	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/afd2f09c-4bd5-47a5-8d4f-7345aa8925f8
wordpress	www.wordpress.org/plugins/animated-counters/
plugins	www.plugins.trac.wordpress.org/browser/animated-counters/trunk/animated-counters.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Dec 2024 23:24Current

5.9Medium risk

Vulners AI Score5.9

CVSS36.4

EPSS0.001

SSVC

CWE-79