Stored Cross-Site Scripting Vulnerability in Storely Theme for WordPress

CVE-2024-10847

What is CVE-2024-10847?

The Storely theme for WordPress is affected by a vulnerability that enables authenticated attackers with Contributor-level access and higher to perform Stored Cross-Site Scripting. This vulnerability arises from inadequate input sanitization and output escaping, allowing malicious actors to inject harmful web scripts. These scripts execute when a user navigates to the compromised page, posing significant security risks to site users.

References