PT-2024-37420 · WordPress · Term-And-Category-Based-Posts-Widget+1
CVSS v3.1
4.8
Medium
| Vector | AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions:
Category Posts Widget WordPress plugin versions prior to 4.9.17
term-and-category-based-posts-widget WordPress plugin versions prior to 4.9.13
Description:
The issue concerns the failure to validate and escape certain "Category Posts" widget settings before they are outputted in a page or post where the widget is embedded. This could allow high-privilege users, such as administrators, to perform Stored Cross-Site Scripting attacks, even in scenarios where the unfiltered html capability is disallowed, such as in multisite setups.
Recommendations:
For Category Posts Widget WordPress plugin versions prior to 4.9.17, update to version 4.9.17 or later.
For term-and-category-based-posts-widget WordPress plugin versions prior to 4.9.13, update to version 4.9.13 or later.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Category Posts Widget
Term-And-Category-Based-Posts-Widget