The 012 Ps Multi Languages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via translated titles in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Metrics
Affected Vendors & Products
References
History
Wed, 02 Oct 2024 17:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Wangbin
Wangbin 012 Ps Multi Languages |
|
CPEs | cpe:2.3:a:wangbin:012_ps_multi_languages:*:*:*:*:*:wordpress:*:* | |
Vendors & Products |
Wangbin
Wangbin 012 Ps Multi Languages |
Thu, 26 Sep 2024 15:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 26 Sep 2024 02:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | The 012 Ps Multi Languages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via translated titles in all versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. | |
Title | 012 PS Multi Languages <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | |
Weaknesses | CWE-79 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Wordfence
Published: 2024-09-26T02:03:23.016Z
Updated: 2024-09-26T14:57:16.876Z
Reserved: 2024-09-11T18:03:26.015Z
Link: CVE-2024-8723
Vulnrichment
Updated: 2024-09-26T14:57:11.348Z
NVD
Status : Analyzed
Published: 2024-09-26T03:15:03.310
Modified: 2024-10-02T17:00:23.603
Link: CVE-2024-8723
Redhat
No data.