Skip to content
Sign in
4.8 Medium

CVE-2024-9600 The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high…

Description

The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high privilege users such as author to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
Ditty 3.1 earliest → < 3.1.47 3.1.47
Ditty 3.1 earliest → < 3.1.47 3.1.47

Other CVEs of Ditty

The 8 CVEs of Ditty →
CVE-2025-8085 The Ditty WordPress plugin before 3.1.58 lacks authorization and authentication for requests to its displayItems… 8.6 High CVE-2024-13357 The Ditty WordPress plugin before 3.1.52 does not sanitise and escape some of its settings, which could allow high… 4.8 Medium CVE-2024-6715 The Ditty WordPress plugin before 3.1.46 re-introduced a previously fixed security issue… 6.1 Medium CVE-2024-6710 The Ditty WordPress plugin before 3.1.45 does not sanitise and escape some parameters, which could allow users with a… 5.4 Medium
Track this CVE