CVE-2024-4899
SEOPress < 7.8 - Contributor+ Stored XSS
MEDIUM 5.0EPSS 0.3%
The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.
- Affected
- SEOPress
- CVSS v3.1 CNA
- 5.0 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L - EPSS
- 0.34% chance of exploitation in the next 30 days, 26th percentile
- Published
- 2024-06-24
- Updated
- 2024-08-01