CVE-2024-4217

{"id": "CVE-2024-4217", "cveTags": [], "metrics": {}, "published": "2024-07-13T06:15:03.097", "references": [{"url": "https://wpscan.com/vulnerability/55cb43bf-7c8f-4df7-b4de-bf2bb1c2766d/", "source": "contact@wpscan.com"}], "vulnStatus": "Awaiting Analysis", "descriptions": [{"lang": "en", "value": "The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a Contributor account to conduct Stored XSS attacks."}, {"lang": "es", "value": "El complemento shortcodes-ultimate-pro de WordPress anterior a 7.1.5 no escapa adecuadamente a algunas de las configuraciones de sus c\u00f3digos cortos, lo que hace posible que los atacantes con una cuenta de Contributor realicen ataques XSS almacenados."}], "lastModified": "2024-07-15T13:00:34.853", "sourceIdentifier": "contact@wpscan.com"}