CVE-2024-9589 Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

🗓️ 22 Oct 2024 07:34:36Reported by WordfenceType

Category and Taxonomy Meta Fields plugin (CVE-2024-9589) allows Authenticated Stored Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 5
NVD	CVE-2024-9589	22 Oct 202408:15	–	nvd
Cvelist	CVE-2024-9589 Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting	22 Oct 202407:36	–	cvelist
CVE	CVE-2024-9589	22 Oct 202408:15	–	cve
Patchstack	WordPress Category and Taxonomy Meta Fields Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)	21 Oct 202400:00	–	patchstack
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (October 21, 2024 to October 27, 2024)	31 Oct 202415:37	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/9d879fc6-97ec-4ecb-99c8-7fc0b91692ef
plugins	www.plugins.trac.wordpress.org/browser/wp-custom-taxonomy-meta/trunk/includes/options.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Oct 2024 07:36Current

5.9Medium risk

Vulners AI Score5.9

CVSS35.5

EPSS0.0004

SSVC

CWE-79