Stored Cross-Site Scripting in Rank Math SEO Plugin for WordPress

CVE-2024-13227

What is CVE-2024-13227?

The Rank Math SEO plugin for WordPress is susceptible to a Stored Cross-Site Scripting vulnerability via the Rank Math API. This issue arises from inadequate input sanitization and output escaping for user-supplied attributes. Authenticated users with contributor-level access or higher can exploit this vulnerability to inject arbitrary web scripts into pages, which will execute whenever other users access the affected pages. This could potentially lead to the manipulation of site content and unauthorized actions performed within the context of the affected user's session.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References