Cross-site Scripting Vulnerability in WPDeveloper EmbedPress Plugin
CVE-2024-50461

6.5MEDIUM

Key Information:

Vendor

WPdeveloper

Status
Embedpress
Vendor
CVE Published:
28 October 2024

What is CVE-2024-50461?

A Cross-site Scripting (XSS) vulnerability occurs in the WPDeveloper EmbedPress plugin, allowing attackers to inject malicious scripts that could be executed in the context of a user's browser session. This vulnerability affects EmbedPress across various versions, enabling stored XSS attacks that compromise user data and security. Proper sanitization of user inputs is crucial to prevent exploitation, making it essential for website administrators to update to the latest version or implement necessary mitigations.

Affected Version(s)

EmbedPress 0 <= 4.0.14

References

https://patchstack.com/database/Wordpress/Plugin/embedpre...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.