← CVE Intelligence

CVE-2024-3111

H5P < 1.15.8 - Contributor+ Stored XSS PUBLISHED

Description (CNA)

The Interactive Content WordPress plugin before 1.15.8 does not validate uploads which could allow a Contributors and above to update malicious SVG files, leading to Stored Cross-Site Scripting issues

Affected (CNA)

Vendor / productVersions
Unknown / Interactive Content affected 0 before 1.15.8

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.