← CVE Intelligence

CVE-2024-4217

Shortcodes Ultimate Pro < 7.1.5 - Contributor+ Stored Cross-Site Scripting XSS PUBLISHED

Description (CNA)

The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a Contributor account to conduct Stored XSS attacks.

Affected (CNA)

Vendor / productVersions
Unknown / shortcodes-ultimate-proaffected 0 before 7.1.5

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.