← CVE Intelligence

CVE-2024-2583

Shortcodes Ultimate < 7.0.5 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.0.5 does not properly escape some of its shortcodes attributes before they are echoed back to users, making it possible for users with the contributor role to conduct Stored XSS attacks.

Affected (CNA)

Vendor / productVersions
Unknown / WP Shortcodes Plugin — Shortcodes Ultimateaffected 0 before 7.0.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.