CVE-2024-6158

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
4.8MEDIUM
EPSS
0.2%
top 57.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Unknown Category Posts WidgetUnknown Term-and-category-based-posts-widgetTiptoppress Term AND Category Based Posts Widget+1 more
Timeline
PublishedAug 12

Description

The Category Posts Widget WordPress plugin before 4.9.17, term-and-category-based-posts-widget WordPress plugin before 4.9.13 does not validate and escape some of its "Category Posts" widget settings before outputting them back in a page/post where the Widget is embed, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NExploitability: 1.7 | Impact: 2.7

Affected Packages4 packages

▶CVEListV5unknown/category_posts_widget< 4.9.17

🔴Vulnerability Details

2
GHSA
GHSA-pc7f-4968-m375: The Category Posts Widget WordPress plugin before 4↗2024-08-12
▶
CVEList
Category Posts Widget (Free < 4.9.17, Pro < 4.9.13) - Admin+ Stored XSS↗2024-08-09
▶
CVE-2024-6158 (MEDIUM CVSS 4.8) | The Category Posts Widget WordPress | cvebase.io