CVE-2024-2234

Himer - Social Questions and Answers < 2.1.1 - Contributor+ Stored XSS

The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks

Affected

Himer

CVSS v3.1 NVD

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v3.1 CNA

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

EPSS

0.34% chance of exploitation in the next 30 days, 25th percentile

Published

2024-07-03

Updated

2024-08-01

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/37018a3f-895f-48f7-b033-c051e2462830/

Security advisories

• https://wpscan.com/vulnerability/37018a3f-895f-48f7-b033-c051e2462830

References

• CVE Record
• NVD entry