The WP Secure Maintenance WordPress plugin before 1.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: WPScan
Published: 2024-07-12T06:00:05.863Z
Updated: 2024-08-01T20:47:41.783Z
Reserved: 2024-05-10T13:25:03.358Z
Link: CVE-2024-4753
Vulnrichment
Updated: 2024-08-01T20:47:41.783Z
NVD
Status : Modified
Published: 2024-07-12T06:15:04.190
Modified: 2024-08-01T13:59:33.903
Link: CVE-2024-4753
Redhat
No data.