Skip to content
Sign in
5.4 Medium

CVE-2024-9021 In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to…

Description

In the process of testing the Relevanssi WordPress plugin before 4.23.1, a vulnerability was found that allows you to implement Stored XSS on behalf of the Contributor+ by embedding malicious script, which entails account takeover backdoor

Affected products and versions

Product Affected versions Fixed in
Relevanssi 4.23 earliest → < 4.23.1 4.23.1
relevanssi 4.23 earliest → < 4.23.1 4.23.1

Other CVEs of Relevanssi

The 3 CVEs of Relevanssi →
CVE-2025-14719 The Relevanssi WordPress plugin before 4.26.0, Relevanssi Premium WordPress plugin before 2.29.0 do not sanitize and… 4.9 Medium CVE-2023-7199 The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any… 5.3 Medium
Track this CVE