CVE-2024-8500 WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

🗓️ 23 Oct 2024 11:27:04Reported by WordfenceType

WP Shortcodes Plugin vulnerability in Shortcodes Ultimate version 7.2.

Reporter	Title	Published	Views	Family All 5
Patchstack	WordPress Shortcodes Ultimate Plugin <= 7.2.2 is vulnerable to Cross Site Scripting (XSS)	23 Oct 202400:00	–	patchstack
NVD	CVE-2024-8500	23 Oct 202411:15	–	nvd
CVE	CVE-2024-8500	23 Oct 202411:15	–	cve
Cvelist	CVE-2024-8500 WP Shortcodes Plugin — Shortcodes Ultimate <= 7.2.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting	23 Oct 202411:04	–	cvelist
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)	31 Oct 202415:37	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/78af6e06-4b4c-4f56-a6f8-f98e8f681976
plugins	www.plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/includes/js/shortcodes/index.js
plugins	www.plugins.trac.wordpress.org/changeset/3171844/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Oct 2024 11:04Current

5.8Medium risk

Vulners AI Score5.8

CVSS35.4

EPSS0.001

SSVC

CWE-79