CVE-2024-2430

MOYENNE 5.4CVE-2024-2430 · Published 12/07/2024 · updated 17/06/2026

En bref

CVE-2024-2430 est une vulnérabilité MOYENNE (CVSS 5.4) touchant website content in page or post (matteoenna).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.31%, plus élevée que 24.3% des vulnérabilités.
Correctif : mettre à jour vers 2024.04.09 ou plus récent.

Package	Affected versions	Patched versions
website content in page or post matteoenna	`< 2024.04.09`	`2024.04.09`

Description

The Website Content in Page or Post WordPress plugin before 2024.04.09 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

References

wpscan.com/vulnerability/990b7d7a-3d7a-46d5-9aeb-740de817e2d9 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free