Stored Cross-Site Scripting Vulnerability in Open Hours Plugin for WordPress

CVE-2024-12813

What is CVE-2024-12813?

The Open Hours – Easy Opening Hours plugin for WordPress suffers from a Stored Cross-Site Scripting vulnerability. This flaw arises from inadequate input sanitization and output escaping of user-supplied attributes in the 'open-hours-current-status' shortcode. Authenticated attackers with contributor-level access can exploit this vulnerability to inject malicious scripts into web pages, which will execute whenever users view the compromised content. This could lead to unauthorized actions being carried out in the context of the logged-in user.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References