Stored Cross-Site Scripting Vulnerability in WP Post List Table Plugin for WordPress

CVE-2024-13664

What is CVE-2024-13664?

The WP Post List Table plugin for WordPress has a vulnerability that allows authenticated users with contributor-level access and above to perform Stored Cross-Site Scripting (XSS) attacks. This issue arises from inadequate input validation and output encoding on attributes supplied by users in the 'wpb_post_list_table' shortcode. As a result, attackers can inject arbitrary web scripts into pages, which will execute whenever those pages are accessed by users. This could lead to unauthorized actions and data exposure, emphasizing the importance of updating to the latest version to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References