The AGCA WordPress plugin before 7.2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
CVSS
No CVSS.
References
Configurations
No configuration.
History
25 Apr 2024, 13:18
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
25 Apr 2024, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-04-25 06:15
Updated : 2024-04-25 13:18
NVD link : CVE-2024-2907
Mitre link : CVE-2024-2907
CVE.ORG link : CVE-2024-2907
JSON object : View
Products Affected
No product.
CWE
No CWE.