Stored XSS Vulnerability in Tooltip WordPress Tooltips Allows CSRF

CVE-2024-31285

What is CVE-2024-31285?

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the WordPress Tooltips plugin, which could lead to Stored Cross-Site Scripting (XSS) attacks. This vulnerability threatens the integrity and security of websites utilizing the plugin by allowing an attacker to trick users into executing unwanted actions on their behalf. The issue impacts all versions of the WordPress Tooltips plugin through 9.5.3, necessitating prompt attention from site administrators to mitigate potential exploitation.

References