CVE-2024-43321

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.2%

top 63.66%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Pickplugins Team Showcase

Timeline

PublishedAug 18

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored XSS.This issue affects Team Showcase: from n/a through 1.22.23.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:LExploitability: 2.3 | Impact: 3.7

Affected Packages1 packages

▶CVEListV5pickplugins/team_showcasen/a — 1.22.23

🔴Vulnerability Details

GHSA

GHSA-63v6-7xm2-3vhj: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored X↗2024-08-18

▶

CVEList

WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability↗2024-08-18

▶