Stored XSS Vulnerability in WP-PostRatings

CVE-2024-39659

Summary

A vulnerability exists in the WP-PostRatings plugin developed by Lester ‘GaMerZ’ Chan, which allows for the possibility of stored cross-site scripting (XSS). This issue arises from improper neutralization of input during web page generation, whereby an attacker can inject malicious scripts into the application. Affected versions of the plugin range from n/a to 1.91.1, and successful exploitation can compromise website security, leading to unauthorized access and manipulation of user data.

References