Lucene search

CVE-2024-4095 Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

🗓️ 15 Jun 2024 08:18:42Reported by WordfenceType

CVE-2024-4095 Collapse-O-Matic plugin for WordPress - Stored Cross-Site Scripting vulnerabilit

Reporter	Title	Published	Views	Family All 6
NVD	CVE-2024-4095	15 Jun 202409:15	–	nvd
Cvelist	CVE-2024-4095 Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	15 Jun 202408:42	–	cvelist
Patchstack	WordPress Collapse-O-Matic Plugin <= 1.8.5.8 is vulnerable to Cross Site Scripting (XSS)	14 Jun 202400:00	–	patchstack
CVE	CVE-2024-4095	15 Jun 202409:15	–	cve
WPVulnDB	Collapse-O-Matic <= 1.8.5.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode	14 Jun 202400:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 10, 2024 to June 16, 2024)	20 Jun 202413:40	–	wordfence

Source	Link
github	www.github.com/baden03/collapse-o-matic/blob/561d8ab53a03e44c12234ba9687226fdbb5054cc/collapse-o-matic.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d4c56931-c2af-4940-95e4-3f3dae51c31c
wordpress	www.wordpress.org/plugins/jquery-collapse-o-matic/
pluginoven	www.pluginoven.com/plugins/collapse-o-matic/documentation/shortcode/
plugins	www.plugins.trac.wordpress.org/changeset

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Jun 2024 08:42Current

5.8Medium risk

Vulners AI Score5.8

CVSS36.4

EPSS0.001