nvd-json-data-feeds/CVE-2024/CVE-2024-42xx/CVE-2024-4217.json

{
  "id": "CVE-2024-4217",
  "sourceIdentifier": "contact@wpscan.com",
  "published": "2024-07-13T06:15:03.097",
  "lastModified": "2024-07-15T13:00:34.853",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The shortcodes-ultimate-pro WordPress plugin before 7.1.5 does not properly escape some of its shortcodes' settings, making it possible for attackers with a Contributor account to conduct Stored XSS attacks."
    },
    {
      "lang": "es",
      "value": "El complemento shortcodes-ultimate-pro de WordPress anterior a 7.1.5 no escapa adecuadamente a algunas de las configuraciones de sus c\u00f3digos cortos, lo que hace posible que los atacantes con una cuenta de Contributor realicen ataques XSS almacenados."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://wpscan.com/vulnerability/55cb43bf-7c8f-4df7-b4de-bf2bb1c2766d/",
      "source": "contact@wpscan.com"
    }
  ]
}