CVE-2024-13101 — WP MediaTagger <= 4.1.1 - Contributor+ Stored XSS

CVE-2024-13101

WP MediaTagger <= 4.1.1 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The WP MediaTagger WordPress plugin through 4.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected (CNA)

Vendor / product	Versions
Unknown / WP MediaTagger	affected 0 through 4.1.1

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/03f51b54-0ec2-40ce-a0fa-ef0c4ab0ea99/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.