Aller au contenu
en Se connecter
4.7 Moyenne

CVE-2024-5575 The Ditty WordPress plugin before 3.1.43 does not sanitise and escape some of its blocks' settings, which could allow…

Description

The Ditty WordPress plugin before 3.1.43 does not sanitise and escape some of its blocks' settings, which could allow high privilege users such as authors to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Produits et versions touchés

Produit Versions touchées Corrigé en
Ditty 1.0 1.0.2 → < 3.1.43 3.1.43
Ditty 3.1 premières → < 3.1.43 3.1.43

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Ditty

Les 10 CVE de Ditty →
CVE-2026-94461 Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions 6.5 Moyenne CVE-2026-81274 Subscriber Broken Access Control in Ditty <= 3.1.67 versions 5.3 Moyenne CVE-2026-27355 Unauthenticated Broken Access Control in Ditty <= 3.1.66 versions 5.3 Moyenne CVE-2025-60105 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in… 6.5 Moyenne
Suivre cette CVE