CVE-2024-4217

published 2024-07-13

CVE-2024-4217: The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a…

Priority P4 21 medium 4.7 CVSS 3.1

AV N AC L PR N UI R S C C N I L A N

The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a Contributor account to conduct Stored XSS attacks.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
getshortcodes	shortcodes_ultimate	< 7.1.5	7.1.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-79