CVE-2024-4096 Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS

2024-07-3006:00:07

WPScan

github.com

responsive tabs

stored xss

high privilege users

wordpress plugin

AI Score

5.8

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attacks

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:wpdarko:responsive_tabs:*:*:*:*:*:wordpress:*:*"
    ],
    "vendor": "wpdarko",
    "product": "responsive_tabs",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver",
        "lessThanOrEqual": "4.0.8"
      }
    ],
    "defaultStatus": "unknown"
  }
]